Warning: Permanently added '[localhost]:57807' (ECDSA) to the list of known hosts. 2022/10/03 10:45:49 fuzzer started 2022/10/03 10:45:50 dialing manager at localhost:35095 syzkaller login: [ 36.340179] cgroup: Unknown subsys name 'net' [ 36.422226] cgroup: Unknown subsys name 'rlimit' 2022/10/03 10:46:04 syscalls: 203 2022/10/03 10:46:04 code coverage: enabled 2022/10/03 10:46:04 comparison tracing: enabled 2022/10/03 10:46:04 extra coverage: enabled 2022/10/03 10:46:04 setuid sandbox: enabled 2022/10/03 10:46:04 namespace sandbox: enabled 2022/10/03 10:46:04 Android sandbox: enabled 2022/10/03 10:46:04 fault injection: enabled 2022/10/03 10:46:04 leak checking: enabled 2022/10/03 10:46:04 net packet injection: enabled 2022/10/03 10:46:04 net device setup: enabled 2022/10/03 10:46:04 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 10:46:04 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 10:46:04 USB emulation: enabled 2022/10/03 10:46:04 hci packet injection: enabled 2022/10/03 10:46:04 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 10:46:04 802.15.4 emulation: enabled 2022/10/03 10:46:04 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 10:46:06 starting 8 fuzzer processes 10:46:06 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8d1) fork() sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xa8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}]}, 0xa8}}, 0x800) 10:46:06 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r9) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) 10:46:06 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000009c0)=""/130, &(0x7f0000000a80)=0x82) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/tcp6\x00') accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x5c}}, 0x40040) 10:46:06 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) r6 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:46:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff8a}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe360}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000845}, 0x4020000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x863}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000803}, 0x4004080) 10:46:06 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x810, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1800}, 0x41) semget(0x1, 0x4, 0x30) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 10:46:06 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) r8 = io_uring_setup(0x41ae, &(0x7f0000000900)={0x0, 0x52d, 0x1, 0x0, 0x3da, 0x0, r3}) io_uring_enter(r8, 0x795c, 0x6b16, 0x2, &(0x7f0000000980)={[0x3]}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) [ 51.715544] audit: type=1400 audit(1664793966.186:6): avc: denied { execmem } for pid=284 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:46:06 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x792d, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000) r6 = socket(0x22, 0x3, 0x200) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c80)={0x1138, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "334bd77cccd262b6eb555061420aa289d8edde6e832b47ef553e1d9f24"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "7af70cf7378d47993c7e6900b2ba2acd7b9e349c96b52535f7531ed4e184d282"}}]}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4081}, 0x4000055) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000001e40)={0xff, 0x5}) [ 52.911662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.913564] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.914900] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.917887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.919898] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.921419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.926204] Bluetooth: hci0: HCI_REQ-0x0c1a [ 52.961994] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.965572] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.966802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.971275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.973928] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.976560] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.984115] Bluetooth: hci1: HCI_REQ-0x0c1a [ 52.988298] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.995675] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.997144] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.000561] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.002152] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.003574] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.008705] Bluetooth: hci2: HCI_REQ-0x0c1a [ 53.052117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.054412] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.056694] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 53.058009] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.059623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.060977] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 53.062458] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.063715] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.064989] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 53.070296] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.071757] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 53.072979] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.076824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.078469] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.089558] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.092556] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 53.104190] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.105205] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 53.111435] Bluetooth: hci4: HCI_REQ-0x0c1a [ 53.113898] Bluetooth: hci5: HCI_REQ-0x0c1a [ 53.117519] Bluetooth: hci3: HCI_REQ-0x0c1a [ 53.146673] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 53.150977] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 53.155739] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 53.174067] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 53.181567] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 53.188130] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 53.201461] Bluetooth: hci7: HCI_REQ-0x0c1a [ 54.995813] Bluetooth: hci1: command 0x0409 tx timeout [ 54.995826] Bluetooth: hci0: command 0x0409 tx timeout [ 55.058445] Bluetooth: hci2: command 0x0409 tx timeout [ 55.122799] Bluetooth: hci4: command 0x0409 tx timeout [ 55.123861] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 55.187453] Bluetooth: hci5: command 0x0409 tx timeout [ 55.188807] Bluetooth: hci3: command 0x0409 tx timeout [ 55.250918] Bluetooth: hci7: command 0x0409 tx timeout [ 57.042449] Bluetooth: hci1: command 0x041b tx timeout [ 57.043399] Bluetooth: hci0: command 0x041b tx timeout [ 57.107403] Bluetooth: hci2: command 0x041b tx timeout [ 57.170419] Bluetooth: hci4: command 0x041b tx timeout [ 57.234507] Bluetooth: hci3: command 0x041b tx timeout [ 57.235255] Bluetooth: hci5: command 0x041b tx timeout [ 57.298514] Bluetooth: hci7: command 0x041b tx timeout [ 58.143014] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.148885] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.152935] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.162678] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.170579] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.176570] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.190163] Bluetooth: hci6: HCI_REQ-0x0c1a [ 59.090444] Bluetooth: hci0: command 0x040f tx timeout [ 59.091299] Bluetooth: hci1: command 0x040f tx timeout [ 59.154486] Bluetooth: hci2: command 0x040f tx timeout [ 59.218536] Bluetooth: hci4: command 0x040f tx timeout [ 59.282448] Bluetooth: hci5: command 0x040f tx timeout [ 59.283218] Bluetooth: hci3: command 0x040f tx timeout [ 59.347588] Bluetooth: hci7: command 0x040f tx timeout [ 60.242489] Bluetooth: hci6: command 0x0409 tx timeout [ 61.138875] Bluetooth: hci1: command 0x0419 tx timeout [ 61.139376] Bluetooth: hci0: command 0x0419 tx timeout [ 61.202439] Bluetooth: hci2: command 0x0419 tx timeout [ 61.266444] Bluetooth: hci4: command 0x0419 tx timeout [ 61.331051] Bluetooth: hci3: command 0x0419 tx timeout [ 61.331485] Bluetooth: hci5: command 0x0419 tx timeout [ 61.394431] Bluetooth: hci7: command 0x0419 tx timeout [ 62.290435] Bluetooth: hci6: command 0x041b tx timeout [ 64.338393] Bluetooth: hci6: command 0x040f tx timeout [ 66.386451] Bluetooth: hci6: command 0x0419 tx timeout 10:46:58 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) r8 = io_uring_setup(0x41ae, &(0x7f0000000900)={0x0, 0x52d, 0x1, 0x0, 0x3da, 0x0, r3}) io_uring_enter(r8, 0x795c, 0x6b16, 0x2, &(0x7f0000000980)={[0x3]}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:46:58 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) r8 = io_uring_setup(0x41ae, &(0x7f0000000900)={0x0, 0x52d, 0x1, 0x0, 0x3da, 0x0, r3}) io_uring_enter(r8, 0x795c, 0x6b16, 0x2, &(0x7f0000000980)={[0x3]}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:46:58 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r9) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) 10:46:58 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) r8 = io_uring_setup(0x41ae, &(0x7f0000000900)={0x0, 0x52d, 0x1, 0x0, 0x3da, 0x0, r3}) io_uring_enter(r8, 0x795c, 0x6b16, 0x2, &(0x7f0000000980)={[0x3]}, 0x8) socket$nl_audit(0x10, 0x3, 0x9) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:46:59 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) r6 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:46:59 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r9) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) 10:46:59 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) r8 = io_uring_setup(0x41ae, &(0x7f0000000900)={0x0, 0x52d, 0x1, 0x0, 0x3da, 0x0, r3}) io_uring_enter(r8, 0x795c, 0x6b16, 0x2, &(0x7f0000000980)={[0x3]}, 0x8) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:46:59 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) r6 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:18 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) r6 = syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x48, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x51) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:18 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8d1) fork() sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xa8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}]}, 0xa8}}, 0x800) 10:47:18 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x810, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1800}, 0x41) semget(0x1, 0x4, 0x30) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 10:47:18 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) io_uring_setup(0x41ae, &(0x7f0000000900)={0x0, 0x52d, 0x1, 0x0, 0x3da, 0x0, r3}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:47:18 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r9) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) sendmsg$BATADV_CMD_GET_GATEWAYS(r7, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20048004) 10:47:18 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000009c0)=""/130, &(0x7f0000000a80)=0x82) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/tcp6\x00') accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x5c}}, 0x40040) 10:47:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff8a}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe360}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000845}, 0x4020000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x863}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000803}, 0x4004080) 10:47:18 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x792d, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000) r6 = socket(0x22, 0x3, 0x200) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c80)={0x1138, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "334bd77cccd262b6eb555061420aa289d8edde6e832b47ef553e1d9f24"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "7af70cf7378d47993c7e6900b2ba2acd7b9e349c96b52535f7531ed4e184d282"}}]}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4081}, 0x4000055) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000001e40)={0xff, 0x5}) 10:47:30 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff8a}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe360}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000845}, 0x4020000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x863}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000803}, 0x4004080) 10:47:30 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r9) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) 10:47:30 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x7, &(0x7f00000008c0), 0x1) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:47:30 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000009c0)=""/130, &(0x7f0000000a80)=0x82) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/tcp6\x00') accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x5c}}, 0x40040) 10:47:30 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x792d, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000) r6 = socket(0x22, 0x3, 0x200) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c80)={0x1138, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "334bd77cccd262b6eb555061420aa289d8edde6e832b47ef553e1d9f24"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "7af70cf7378d47993c7e6900b2ba2acd7b9e349c96b52535f7531ed4e184d282"}}]}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4081}, 0x4000055) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000001e40)={0xff, 0x5}) 10:47:30 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8d1) fork() sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xa8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}]}, 0xa8}}, 0x800) 10:47:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x810, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1800}, 0x41) semget(0x1, 0x4, 0x30) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 10:47:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x810, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1800}, 0x41) semget(0x1, 0x4, 0x30) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 10:47:31 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:31 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x810, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1800}, 0x41) semget(0x1, 0x4, 0x30) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) 10:47:45 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000a80)) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:45 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x792d, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000) r6 = socket(0x22, 0x3, 0x200) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c80)={0x1138, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "334bd77cccd262b6eb555061420aa289d8edde6e832b47ef553e1d9f24"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "7af70cf7378d47993c7e6900b2ba2acd7b9e349c96b52535f7531ed4e184d282"}}]}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4081}, 0x4000055) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000001e40)={0xff, 0x5}) 10:47:45 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) 10:47:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff8a}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe360}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000845}, 0x4020000) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x863}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000803}, 0x4004080) 10:47:45 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8d1) fork() sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000001e40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001e00)={&(0x7f0000001d40)={0xa8, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}]}]}, 0xa8}}, 0x800) 10:47:45 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000009c0)=""/130, &(0x7f0000000a80)=0x82) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/tcp6\x00') accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffffffff}]}, 0x5c}}, 0x40040) 10:47:45 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r6) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:47:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x810, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1800}, 0x41) semget(0x1, 0x4, 0x30) 10:47:45 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') mmap$usbmon(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x20050, r5, 0x7fffffff) syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1000}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffff8a}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x7f}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x10}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010100}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macsec0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe360}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xf4}, 0x1, 0x0, 0x0, 0x24000845}, 0x4020000) 10:47:45 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:47:45 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x792d, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000) r6 = socket(0x22, 0x3, 0x200) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000001e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001dc0)={&(0x7f0000000c80)={0x1138, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x10ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "334bd77cccd262b6eb555061420aa289d8edde6e832b47ef553e1d9f24"}}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "7af70cf7378d47993c7e6900b2ba2acd7b9e349c96b52535f7531ed4e184d282"}}]}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4081}, 0x4000055) 10:47:45 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) socket$nl_generic(0x10, 0x3, 0x10) semget(0x1, 0x4, 0x30) 10:47:45 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) syz_open_dev$tty20(0xc, 0x4, 0x0) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:47:45 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) 10:47:45 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8d1) fork() 10:47:46 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000009c0)=""/130, &(0x7f0000000a80)=0x82) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000ac0)='net/tcp6\x00') accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) 10:48:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r3, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) 10:48:01 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000009c0)=""/130, &(0x7f0000000a80)=0x82) accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) 10:48:01 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), r9) 10:48:01 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x792d, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4044040}, 0x10000) socket(0x22, 0x3, 0x200) 10:48:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800008}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x34, r2, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7f, 0xb}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004040}, 0x4040000) semget(0x1, 0x4, 0x30) 10:48:01 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)={'batadv0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b40)={0x90, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8040}, 0x8d1) fork() 10:48:01 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={0x24c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'hsr0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffff8, @mcast2, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x95af, @private0={0xfc, 0x0, '\x00', 0x1}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK={0x144, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xeb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8f9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c97}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x59}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff51}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbe1a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x915}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4587}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf98}]}]}, 0x24c}}, 0x4080) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:48:01 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:01 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:01 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r7, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}]}, 0x24}}, 0x14) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:48:01 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) semget(0x1, 0x4, 0x30) 10:48:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x64, r1, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x4000001) 10:48:02 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000a00)={0x5b, 0x7, &(0x7f0000000600)}) syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:02 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)) fork() 10:48:02 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x3, 0x200) 10:48:02 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), 0xffffffffffffffff) 10:48:02 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}]}, 0x48}}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r5, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:02 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r6, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) 10:48:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) semget(0x1, 0x4, 0x30) 10:48:02 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r4, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:02 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) [ 175.570486] Bluetooth: hci0: command 0x0406 tx timeout [ 175.570580] Bluetooth: hci2: command 0x0406 tx timeout [ 175.570960] Bluetooth: hci3: command 0x0406 tx timeout [ 175.571857] Bluetooth: hci4: command 0x0406 tx timeout [ 175.572215] Bluetooth: hci1: command 0x0406 tx timeout [ 175.573121] Bluetooth: hci5: command 0x0406 tx timeout [ 175.573481] Bluetooth: hci7: command 0x0406 tx timeout 10:48:13 executing program 5: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r1, 0x9201) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f0000000400)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000440)=[r2, r0, r2, r3], 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r4, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:13 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/nfsfs\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc4c}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4a8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000000}, 0x20000800) sendmsg$AUDIT_USER(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xec, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfc, "b83720d51d51173fcb2e52560ea76400013b7e38c94eab78d83055d3ed9f98d79cf4bdb02ec8554f6772596c77d12e348a7b91d017a03a9ff143bdac29d6426729c084e29b859950a749b29d1df905e00111854be7c8ff350c884737f1b80791853e4701b6d3d6f70cd26810f4452e9a8fa40179098afd94832da113c91f763dd5e4db69cfcb6daf0e481de9c4e768a3fe8e35b2205d87126922ce8968905366ecbc22abbc56ee1f6226b641aecb1ae4062d4eaacfef54f4036a2213241558b2bda7adc8430f0b43ba47d7e62cfa33d80033835e144c80ebd8efa89f", ["", "", "", "", "", "", "", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x48051}, 0x891) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x70, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xffffffc0, 0xd}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) r5 = socket(0x1d, 0x800, 0x7) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8001}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r5) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000007c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe87}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3381ef79}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004810}, 0x8008001) accept$packet(r5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b80)=0x14) 10:48:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r6, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r7, 0x821, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x3e}}}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) 10:48:13 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) socket$nl_generic(0x10, 0x3, 0x10) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:48:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) semget(0x1, 0x4, 0x30) 10:48:13 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "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"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)) fork() 10:48:13 executing program 2: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000000)={'binder0\x00'}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x200, 0x800, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7fffffff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040880) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd74}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r0) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xc8, r2, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x119}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x79}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8179}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5800000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4800}, 0x40011) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)=[r3]}, 0x1) r4 = socket(0x23, 0x80000, 0xfffffff8) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) socket(0x22, 0x3, 0x200) 10:48:13 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), 0xffffffffffffffff) 10:48:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) semget(0x1, 0x4, 0x30) 10:48:13 executing program 5: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x5) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000100)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/148, 0x94}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, 0x0, 0xb1a, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0x20000080) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2d}, @void, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000000) ioctl$MON_IOCQ_URB_LEN(r0, 0x9201) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net\x00') ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000400)) syz_open_dev$tty1(0xc, 0x4, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a40)='net/packet\x00') syz_open_procfs(0x0, &(0x7f0000000ac0)='net/raw\x00') ioctl$SG_IO(r2, 0x2285, &(0x7f0000000f00)={0x53, 0xfffffffffffffffc, 0xe8, 0x81, @buffer={0x0, 0xb5, &(0x7f0000000c40)=""/181}, &(0x7f0000000d00)="baaa40aea8b785d2247d38fc7919ca2f667ad6d88331fc36c9c82f9ac969c79040cbbb838e0f108d9574b0e4073ffc06fedce5c42dc100fa921a36160c54518441ec7f5c60dc028f6e6a9399f990490267c2d192bbc78b26650863c496279ac5ab4d37043edd0258972570418dc55fb41641a0c4ce957c9480ceb426264ae08a76441b7562d14200574035a62b7d14854aaf1da3b44ffc723b96dcbf4843ce8459f2d1d8825ae702e5ef8b4aff425aca394260cb5ff0edded898d0de61f7073b4b74ecb2eb61bc14c18e0cd4799049ee71b19933f01c61f7a05bf74e89f8e25772cca4f4418cabec", &(0x7f0000000e00)=""/141, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000ec0)}) 10:48:13 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000380)={0x71f, 0x1936, 0x3ff, {0x1, 0x2}, 0x7f, 0x5}) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:48:13 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) r1 = semget$private(0x0, 0x3, 0x410) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/201) semget(0x1, 0x4, 0x30) 10:48:13 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') r1 = syz_open_pts(0xffffffffffffffff, 0x200041) r2 = syz_open_pts(0xffffffffffffffff, 0x2001) r3 = syz_io_uring_setup(0x7cd2, &(0x7f0000000040)={0x0, 0xe07a, 0x20, 0x2, 0x125}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x1ff, 0x0, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r2, r3]}, 0x8) r4 = syz_io_uring_setup(0x24d, &(0x7f00000001c0)={0x0, 0xd6e3, 0x1, 0x2, 0x68, 0x0, r3}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f0000000300)={0x3f, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, r1]}, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x80000) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f00000009c0)=""/166) 10:48:14 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x101, 0x400) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000080)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000100)={0xd2, ""/210}) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) semget$private(0x0, 0x3, 0x410) semget(0x1, 0x4, 0x30) 10:48:14 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0xb02, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}]}, 0x20}}, 0x8001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8014}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/fib_triestat\x00') r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_RADAR_DETECT(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1f}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4) r4 = fork() r5 = syz_open_procfs(r4, &(0x7f0000000400)='net/ip6_tables_matches\x00') syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r5) r6 = memfd_secret(0x0) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r3, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1c9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10040011}, 0x200004c0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000005c0)={'wlan1\x00'}) accept$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000740)=0x14) 10:48:14 executing program 0: r0 = memfd_secret(0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000108}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0xffffff01, 0x5}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/llc/core\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r1, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8}, @void}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xc8, r1, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "dda8b9d1e2c3ff612d1c5e0164d5d53301a28de7777d1307"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8e389199d5d741ac86996bd9b7b353efccc97cba6f8391f9"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "33461cf9f5edef7f9cbc84bbfdcbebc496112f8cd6be490c"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xc8}, 0x1, 0x0, 0x0, 0x2b0e5d40d063b5a9}, 0x4001) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x44, r4, 0x10, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x44}, 0x1, 0x0, 0x0, 0x94}, 0x80) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='map_files\x00') sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x80) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000008c0), r0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x34, r6, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000000a00)={0x102c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS={0xc, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x1004, 0xac, "f74e42a552d68f47044180d3230d14ccdffa7237079f6bfed30885725eac556f8eff7885edecd75741c6a7b7ed869c49ca3ce1c58fc3ea2404c13ef04c15c53b84a414315cba0abc375f340db3d6b4f3f28ef91923fa07849212da0ecc951c7c3aa357702a03df7f5ff83eb4efd4bef8c7504b26b6533528ea6b4dce89b8d1d2b68c9b444a77a2d87efb3dd8886d8b1017918a3036ca5b4b7ba6b2b763e6dcd3bf5764c0d579867808a4d5cad58eea4eb6f85803d4028e739caa4a4097ab2b8b1dc8aaecd6ec9557186a098d1b114fec683bf3935f07ca5dc04e401e61b93d4a380ed38a1cf62dbfc096baff8b8cb3016bcbcd78a8a2fb0afadb4fd2ad3d9f38aa949729938661696c01826cdd07a3411a0d7022929ff6f3c6f6d05c9f207a68934db07769cd78eb0e108dfccbe4774bad28247549e5d5729deb5b3ea4435d2f3c5c1c0bb8c9db709773db654e583bfd9dfa45a8619c3b5fa5b4e62da96607377a31b8f0cb51ec4c0aa3446a0539bf461f8c8fa2b99ace28121030197c17c81721fea77d770680b6ba541ff7ba0d8922f81b1fd895962b6f13f911a432847b66a9d346be37bc7d10ebc7a92d5c1eaa0a6f3f9d1ec49d9b922100fea21ce15eb0b18e310c46702fc67a4f3a0d237ae31b6add5724c2c3a6f983c166a05ae21c41624c1072b88f7aece33801527879322251987e32b2df30486c4d33e6792701c1be88054350bcf00e7cfa45ba8838f65acae85a122ffc43a612d83245ba40d014d85c26638d89098de4c0b7ab7c8682583c2644656951e2ebe8b0a191420ad8d495ffc5663dc0e266a71365676d3bdd292de0f895b92cf3d0b4d70c4d1105e2334ce0a0977ef1e340a02687093abe33e732ed69c08f364fc0549016a3165aa94e4598127d8f90f20fefb9c81d9f1861925303c43640622a8477f8446b0d7f490ec70c4d7c92a05363ce4707c47ae6776df5a2ed6ab93f410f23c6d575c2789be4aec6afc821a41cfb8b60b5ee76dad92601fdb5e8607c981a32c71dc4c6f54d9aa80522a19b659c25f4c199ef0de5f334d3ed7d473c14daf69295ef6439544cf17ab55853ac385838ed411709746475b8ba168bda45de2f8db9c63adc66b3c4132375d430fec5535b111c664d56092c3850cbef866b58e6cadc25df1964b9d0bb6610b1615b9611a281a3b02c1ef50b449f62786e0838cbdc41f7e513a40c7488bec40a8b1c1a965fd23744ea54b447fd40bc02333674e4aa3671832629b527c735e264d28d08215dd0e28ce2878ea55676690e5c6364038ffa4af76c60fc479eef6f0e7c001bd2c2f8535d93c4487de7090cb4af18cefff917b574b02b821ef29fad93b8bba58b4cb36730dbaf82bfba703d696962f0cc2e0bbb7931063ef2fa25a87b2ceee032526e51bed7d24f1745b6c8deb738c7d4af1e0565cb73884c9c081aabb503ba25c6bd3cc24c83e45fbb3117d31df147cb7a39ece334ead3142747ec23d24a75a5a9dcf3d45e5749cf2ef17a9a97f4a5bed61c78bcc030724a8f85603ea815e544c902dd78579296dc2153e54363408bdf7df0b58a2a5320b7cacca4a5c92af94747d786b16d4c9b673f7018d63a8760c1a838047cfe2a25c91f5a67208fbd4002c96bee1cffacac0d63ed7a47cd246ff40a0e7174cfec5f623b563cd04b1c45cbaaa260b264a83d26747fe705c8a9f3ec869904a06f99a77bc9c7a9a433a0fb0fa01f9fbeaf6e5f6950df086d23ee0b66dfdcca0a463559d0045383bbf8fa55ffbbe8d3d8194967d145fee9dfbb8e1965aa4bb3bdcb571b5ddf52034471588b2aa3f725cae0b2ebf6413ff58464f444c9488c93b285c41ec80d82e1e0f5c10e4256daeeda590fc3f91525fcd4844fe38fd771fab79a53a4e47834141c35fc90cab297b667caa623a71e7c03a87abdefdbd65ff142b1acdf8856d7ac38f09b99c4ccbe08bfff8ec9d871e1587feba75987000e1163172110af8ab54549d5ffdabbd2c49e52d207565e19eb4aed8be8a30adeee4a0781b87d6774749edba264351276aebe9e92c5f7a4019dcfaad984e7220da1887457711cc6e5398a7222e33f53bebddeeef524e0a4bc86cadcdba885a64511a2c6e76595269f3343dbfb2b106937c169ac91d4dbaf476e61df1e5dfde4fa06df3f39159106c0b50c65e0d761db5efda9468114d40366ec07b25c40578542586cd6f662d0dd95efd2ad400a7f907dafbc6e620784d9394beb4a43e58d3c4d12541fe09801be1fbea029c2658236fd292fd18aea6bea9a4013cc54fdd140e8b8fd81da53f2c0af3828b8ab35e2b59913213ec5960b9bb96eabc92a386613fdb8a23ca9d2a2f11f5e052bc9604c0363f4e270ba61f13fa1054fdc3d7bbeb1d84a815e824452e6e37a29f203712c6d0cbc67a29a17949eba59b8021c2e43b3022b38e9f1b27cc170a64398d4d3cc2ff99453f6c0f2d85c37fd0fc4fa82a4e78bc33add191aee00ff24a65a991bab4f11342da1739372f914197a11ff6b1f1a77a8353898f1361606833fadfc6428a7875bb944e7763c0585a8bbd50fd4c4e775629e18df28909eca10903a53584ff8a4e2171c4555cc21bd9e5cf59c4c705f6d48ba03a4bbd8882cbd06e44498e5492520eb6d69486947bc089e5cb8dccb2c81b1e6fb29a6484a3c9d858424e02875370e82dd33c64a33ffa4bd8cacf0ff2a412cc5a602e45e181e9b4ea18b387abdeeeb93fc4c6dccb8161c32897aadf024745dac7dc35e456974b52185d8ce4571498eb24c05a6ec7162e722a4aff24d02cdfefe194f79a0ea766792a89db5f210710bea3777bb8aeea2c9252f402e5acc3d0bf76a18d0a262117c46e5c4d53e77ac29160ce5707907ec491232423d25893e5c3bae5af0fbe66eb3f51d75357d95c93646c8fd909538b4d62e1831e48635490fcf10b5043d213e101bdeb84e2782a55351943dc0cd4d2495ed6ce3d9ff950947a8ff81db7b6c5401795821acb5a721d6f44bd7806b1ff78e9c2541427ce05004602482fb4e29fdc96e7e3319b7292a2af76710fea9af364350e2c47c656acea3e4784004a3df22d252fe962c817cdafe9b27ae87bd98630ae591871975c8cf420b73944e2ceb77b646f5eefce3ed4da42f36682e49dfaa87817682aa0e2e29460f8da0f7669ba98a9fced992a8e616ee3cc4af5a155a592130bce003c9efc91448940a1aacaa4ca7f4ef8f8c31bec11f7bb1cc0910436760588460838716c12e88995138565d81163c15a46eab3246a5ffd5c6ef8fb54026b5114bb9e880c1011f387a7a5206dff76e02ebfd1380c99d058f038d61741f4ed515605c36b346df316aaf2bc1cc71cbef87888e2810c937e81b92f3d59085cf1279c441c72d50570f8d3d0e9771a3363b988969e9033b0949489bbf00d4d2b89e7d52f7012c8bc943d78fa19c73c0c77ea33a14740a4ce5bf2ace0d26617d7fc8ee4a078ceec494013fe2860fea556aee2a2a6c629ae9bbaf75bcfe96e8f41512fed1b929649e33a059dcb079857d300ca557aa1f453cac244353ea2b664067174cbed8bcea13db953fa80e7333f5a7c3bcf45bc1b7db5c109401d6d3c2c77e316f9c80b1a61c6d9d3e10117384f889e53152a6f4d0a4747a8e3f3da9b844a4bbeb07f271783045be4e4f66da051cd2cf52c73dc95a8bac3997f30568f5d00526ae3145ca508bc1071d60a5f072f0653499eb9fd3e2dd5cec16da2832ae1684fe32c5ad18666d05e5430c8eda43437aec88ae41d79163971f0d1ed3474b47d14f6c7c109f33120a1afe4cd8e03fe4ed9657cb7a7aa680dd5d80985defc109ad33627c39a97d51f5e440054a797b62f7d8e99bffafadc5b9dfd9c04da60779f18f2f6ca64cb39f49df32700b2893b26293461888e2548f969ab1578560b0c9cd12d122bd15ede921256448f7ca4e399265ae79405596e8ae0243c666a6d73ddb394ad5692491fae6d0a5e32dc24a790d74206c806efe4a4ba4056d59f11e0c7aff68dc60d41d17b4011b85a6d85343e472947eb0d887676d096da964c133274d8eb056902d936ed34143b2a0afb59dc4f5b63b63048b700672d42771e958d349ea951c72b5951166f63d4f3185b4c45299a2a071e05e0b6ddaac329b431a6af98c374197c2999283d0998770da2643b6d43a6a8f9069d0189a1d8cad4c008eb902f7b4022dc086b2480cab592a618cf835bcf0a44a72b53a107734dadaff4a74709c2b632dff05d5471de757bf493eb48a199956aa87bce8917af171e0fa4c51e0e53d19b56e1ed26e2a52f3f9207847714de596c762d2a84cf3726e5847ce0180afb5052f1a2ae9eee5cad651fc412b0563b638040d4ca95c8da37916b65f8c0b45d996e40d32eaa580b6e7df6e4e18205712fba611ca3bf85405b10c18ba5a31316d3a9aec62fcadb27b1d97b6dbea09820b184808f07f68421a85627634ce339236ec0920f80d4483e59af5e1e1b87b3c3b11425a098cf4357bf8e9c9597f3ea09412e911a4c9bc2a130da160ec3a4b53750bf24e46cc1bc49ef065aa2b6965058034e01b2ad835fbc37c203d65c353ee9687e50b1d72c92235de0740e58a2afa69090ab8779a7e1d050f1e1e7936fc1fde02f4919724e265f12fa2071b8d210729388abd92d6e7de53d2b1c5e7e3a8ac60b8c0354c7b52068842b502cdaca9ed878f141957b7e9513debeaba3fa6eb1caf64b3f4d40ac3ae3270ddcaedd15b720a03eba3572bdbcc98cb0cc919f3d223cdbcea73a3cd9bfc061697a83c60ea421428e98f32efa0414bcfff46ab1f08aa71c3d1829b6540731922f4d5911435dfec2fa942efc1244b70dcd0dc84a8ee9f12a4eb546c9d13b2ddd7b8025ce120579d0f2e590f0ba77adb534b2daecc14bc506d9a517ead37658ed440c9ae7beaa2e4a39e6122870fcd644ea5026f2020a06884bf50219dac5c6cadd4f387505870604c1df67113b01854ba93cc927e2dcb6b4a6816255247b1b8482a8917056e3db6a19c861467be6ad5cb55e5bdefc88b96baa25ad52df4738c9fd23f7eeadb5cae8d7946e79488fd60b2a341fb03689a92d202c954682e1e2b17ea342eaf43167fdc64b8ca1b28ab06f2b91c7f78eaf4c8b48ba78ce9a6cd3e78c5591afad9103d822b084511f8eef0003610f0adadcfd8dc8abc387fe212afa417ce472ccfbeb0a1ddfb6c894a0a4a6b1e35019778ec17f03df5eb4b4ec7c48793306890edc835f7b11d3f111dc999bc46071a7c3833534320f9940760ad2be86c0687dffd82f6eb5afd4e2b60b382268b1cb4b8fef6ba2dab8ee08aca2a53c6c5d9d1a2b2578d72a4b85e662192f7628fb6ac028c9381a2a7278266492b113e84ec4cd01fc1de555b0ce0e27c5abe5aa917c36359e449a8efe2532f2b5c5a3b76814f22f548c077d5cd330b28b8efacdd3802d2d871e4939996b9b0b7bddc67f388cc26fdd2a49d8a7a64d285332d4a35646a2bce2119736dfbddac8119daa8f9d5a9a07f142d52721e7e73c8f99fef3dac3cc2a739c8fdb8778498178030a50304bc999b355fecf6e27322d01ffd9a5e567432487e226495b2062f387d7b28360c065c0982ef02949521c718e693d150ac233ab3bb84206a55ebda0d24df3164826805bf4d5c3dd353e83548ac7c2b2e182590896f46c76ef5628e9f7ad677fb1d30e997ea26646f9a5005d63a0623a24981bf42c5fc78c611557118fe69b064eb97cd5a2aa2b0fcb6322ae0257f5c6b32b8618c702f78a7d9ba18470b2fff235892ae053e87e709116963fd8fab003ee5a2"}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x4}]}, 0x102c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001b00)) fork() 10:48:14 executing program 1: r0 = socket(0x2a, 0x3, 0xbe) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x412, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x8000) r2 = fork() sendmsg$AUDIT_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, 0x3e9, 0x100, 0x70bd26, 0x25dfdbfe, {0x5, 0x0, 0x2, r2, 0x81, 0x6332, 0x5, 0x8159}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x40000084}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000080) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x4004004) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x2c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000800}, 0x40) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r3) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r7, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3c}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000880), 0xffffffffffffffff) [ 179.666368] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 179.666942] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.667469] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.668021] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 179.668634] Call Trace: [ 179.668825] [ 179.669000] __schedule+0x893/0x2470 [ 179.669298] ? io_schedule_timeout+0x150/0x150 [ 179.669650] ? do_raw_spin_lock+0x121/0x260 [ 179.669974] ? rwlock_bug.part.0+0x90/0x90 [ 179.670297] schedule+0xda/0x1b0 [ 179.670571] rescuer_thread+0x851/0xdb0 [ 179.670883] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.671274] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.671831] ? lockdep_hardirqs_on+0x79/0x100 [ 179.672197] ? worker_thread+0x1260/0x1260 [ 179.672902] kthread+0x2ed/0x3a0 [ 179.673185] ? kthread_complete_and_exit+0x40/0x40 [ 179.673784] ret_from_fork+0x22/0x30 [ 179.674087] [ 179.674264] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 179.674749] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.675150] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.675739] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 179.676374] Call Trace: [ 179.676577] [ 179.676766] __schedule+0x893/0x2470 [ 179.677063] ? io_schedule_timeout+0x150/0x150 [ 179.677438] ? do_raw_spin_lock+0x121/0x260 [ 179.677775] ? rwlock_bug.part.0+0x90/0x90 [ 179.678107] schedule+0xda/0x1b0 [ 179.678396] rescuer_thread+0x851/0xdb0 [ 179.678714] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.679100] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.679510] ? lockdep_hardirqs_on+0x79/0x100 [ 179.679856] ? worker_thread+0x1260/0x1260 [ 179.680188] kthread+0x2ed/0x3a0 [ 179.680471] ? kthread_complete_and_exit+0x40/0x40 [ 179.680852] ret_from_fork+0x22/0x30 [ 179.681159] [ 179.681362] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 179.681857] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.682260] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.682865] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 179.683523] Call Trace: [ 179.683722] [ 179.683904] __schedule+0x893/0x2470 [ 179.684211] ? io_schedule_timeout+0x150/0x150 [ 179.684582] ? do_raw_spin_lock+0x121/0x260 [ 179.684921] ? rwlock_bug.part.0+0x90/0x90 [ 179.685260] schedule+0xda/0x1b0 [ 179.685543] rescuer_thread+0x851/0xdb0 [ 179.685860] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.686260] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.686662] ? lockdep_hardirqs_on+0x79/0x100 [ 179.687018] ? worker_thread+0x1260/0x1260 [ 179.687362] kthread+0x2ed/0x3a0 [ 179.687634] ? kthread_complete_and_exit+0x40/0x40 [ 179.688020] ret_from_fork+0x22/0x30 [ 179.688345] [ 179.688530] INFO: task netns:6 blocked for more than 143 seconds. [ 179.688992] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.689423] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.690018] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 179.690652] Call Trace: [ 179.690861] [ 179.691053] __schedule+0x893/0x2470 [ 179.691373] ? io_schedule_timeout+0x150/0x150 [ 179.691728] ? do_raw_spin_lock+0x121/0x260 [ 179.692068] ? rwlock_bug.part.0+0x90/0x90 [ 179.692426] schedule+0xda/0x1b0 [ 179.692703] rescuer_thread+0x851/0xdb0 [ 179.693021] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.693419] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.693811] ? lockdep_hardirqs_on+0x79/0x100 [ 179.694170] ? worker_thread+0x1260/0x1260 [ 179.694517] kthread+0x2ed/0x3a0 [ 179.694790] ? kthread_complete_and_exit+0x40/0x40 [ 179.695180] ret_from_fork+0x22/0x30 [ 179.695502] [ 179.695684] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 179.696178] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.696597] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.697172] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 179.697810] Workqueue: 0x0 (ata_sff) [ 179.698117] Call Trace: [ 179.698317] [ 179.698509] __schedule+0x893/0x2470 [ 179.698809] ? io_schedule_timeout+0x150/0x150 [ 179.699195] schedule+0xda/0x1b0 [ 179.699481] worker_thread+0x15f/0x1260 [ 179.699808] ? process_one_work+0x16a0/0x16a0 [ 179.700159] kthread+0x2ed/0x3a0 [ 179.700443] ? kthread_complete_and_exit+0x40/0x40 [ 179.700831] ret_from_fork+0x22/0x30 [ 179.701135] [ 179.701316] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 179.701832] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.702238] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.702824] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 179.703474] Workqueue: 0x0 (events_highpri) [ 179.703818] Call Trace: [ 179.704016] [ 179.704194] __schedule+0x893/0x2470 [ 179.704509] ? io_schedule_timeout+0x150/0x150 [ 179.704871] schedule+0xda/0x1b0 [ 179.705141] worker_thread+0x15f/0x1260 [ 179.705482] ? process_one_work+0x16a0/0x16a0 [ 179.705842] kthread+0x2ed/0x3a0 [ 179.706107] ? kthread_complete_and_exit+0x40/0x40 [ 179.706506] ret_from_fork+0x22/0x30 [ 179.706810] [ 179.706997] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 179.707518] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.707927] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.708526] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 179.709156] Call Trace: [ 179.709376] [ 179.709556] __schedule+0x893/0x2470 [ 179.709855] ? io_schedule_timeout+0x150/0x150 [ 179.710205] ? do_raw_spin_lock+0x121/0x260 [ 179.710559] ? rwlock_bug.part.0+0x90/0x90 [ 179.710901] schedule+0xda/0x1b0 [ 179.711212] rescuer_thread+0x851/0xdb0 [ 179.711554] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.711946] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.712349] ? lockdep_hardirqs_on+0x79/0x100 [ 179.712699] ? worker_thread+0x1260/0x1260 [ 179.713033] kthread+0x2ed/0x3a0 [ 179.713299] ? kthread_complete_and_exit+0x40/0x40 [ 179.713701] ret_from_fork+0x22/0x30 [ 179.714000] [ 179.714180] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 179.714719] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.715125] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.715710] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 179.716358] Call Trace: [ 179.716557] [ 179.716736] __schedule+0x893/0x2470 [ 179.717040] ? io_schedule_timeout+0x150/0x150 [ 179.717413] ? mark_held_locks+0x9e/0xe0 [ 179.717732] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.718125] schedule+0xda/0x1b0 [ 179.718408] rcu_tasks_one_gp+0x3db/0xc10 [ 179.718749] rcu_tasks_kthread+0x80/0xa0 [ 179.719078] ? rcu_tasks_postscan+0x10/0x10 [ 179.719431] kthread+0x2ed/0x3a0 [ 179.719698] ? kthread_complete_and_exit+0x40/0x40 [ 179.720079] ret_from_fork+0x22/0x30 [ 179.720401] [ 179.720586] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 179.721097] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.721514] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.722090] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 179.722733] Workqueue: 0x0 (kblockd) [ 179.723043] Call Trace: [ 179.723245] [ 179.723439] __schedule+0x893/0x2470 [ 179.723739] ? io_schedule_timeout+0x150/0x150 [ 179.724106] schedule+0xda/0x1b0 [ 179.724391] worker_thread+0x15f/0x1260 [ 179.724717] ? process_one_work+0x16a0/0x16a0 [ 179.725075] kthread+0x2ed/0x3a0 [ 179.725357] ? kthread_complete_and_exit+0x40/0x40 [ 179.725749] ret_from_fork+0x22/0x30 [ 179.726058] [ 179.726240] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 179.726760] Not tainted 6.0.0-rc7-next-20220930 #1 [ 179.727176] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 179.727770] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 179.728412] Call Trace: [ 179.728612] [ 179.728795] __schedule+0x893/0x2470 [ 179.729098] ? io_schedule_timeout+0x150/0x150 [ 179.729463] ? do_raw_spin_lock+0x121/0x260 [ 179.729803] ? rwlock_bug.part.0+0x90/0x90 [ 179.730135] schedule+0xda/0x1b0 [ 179.730419] rescuer_thread+0x851/0xdb0 [ 179.730736] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.731128] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 179.731534] ? lockdep_hardirqs_on+0x79/0x100 [ 179.731882] ? worker_thread+0x1260/0x1260 [ 179.732217] kthread+0x2ed/0x3a0 [ 179.732502] ? kthread_complete_and_exit+0x40/0x40 [ 179.732893] ret_from_fork+0x22/0x30 [ 179.733203] [ 179.733441] [ 179.733441] Showing all locks held in the system: [ 179.733898] 1 lock held by rcu_tasks_kthre/11: [ 179.734225] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 179.734961] 1 lock held by khungtaskd/25: [ 179.735258] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 179.735932] 1 lock held by in:imklog/188: [ 179.736233] 4 locks held by syz-executor.2/294: [ 179.736580] 2 locks held by kworker/u4:4/323: [ 179.736904] #0: ffff888007c61138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x915/0x16a0 [ 179.737667] #1: ffff88803647fdb0 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x949/0x16a0 [ 179.738464] 1 lock held by syz-executor.3/4425: [ 179.738796] 1 lock held by syz-executor.0/4427: [ 179.739145] [ 179.739273] ============================================= [ 179.739273] [ 183.762502] Bluetooth: hci6: command 0x0406 tx timeout VM DIAGNOSIS: 10:48:14 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff888017d23ef8 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff85407260 RDI=ffff888017d23ef8 RBP=ffffffff85407260 RSP=ffff88801b99f8f8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=ffff888017d23580 R13=ffff888017d23ef8 R14=00000000ffffffff R15=ffff888017d23ef8 RIP=ffffffff842534a4 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fef1d609700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4f9abfb3a4 CR3=0000000017626000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2034313a38343a30 312033202074634f YMM01=0000000000000000 0000000000000000 5d3133383137362e 39373120205b203a YMM02=0000000000000000 0000000000000000 717269647261685f 7065646b636f6c20 YMM03=0000000000000000 0000000000000000 5b203a6c656e7265 6b2072656c6c616b YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d313230383636 2e39373120205b20 YMM07=0000000000000000 0000000000000000 732034313a38343a 3031203320207463 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=000000000000006e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=000000000000006e R11=0000000000000001 R12=000000000000006e R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fbe93338427 CR3=0000000036ffc000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000061 0000000000000000 YMM03=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM04=0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000002000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000