Warning: Permanently added '[localhost]:28851' (ECDSA) to the list of known hosts. 2022/10/01 07:45:56 fuzzer started 2022/10/01 07:45:57 dialing manager at localhost:35095 syzkaller login: [ 37.555631] cgroup: Unknown subsys name 'net' [ 37.625661] cgroup: Unknown subsys name 'rlimit' 2022/10/01 07:46:11 syscalls: 200 2022/10/01 07:46:11 code coverage: enabled 2022/10/01 07:46:11 comparison tracing: enabled 2022/10/01 07:46:11 extra coverage: enabled 2022/10/01 07:46:11 setuid sandbox: enabled 2022/10/01 07:46:11 namespace sandbox: enabled 2022/10/01 07:46:11 Android sandbox: enabled 2022/10/01 07:46:11 fault injection: enabled 2022/10/01 07:46:11 leak checking: enabled 2022/10/01 07:46:11 net packet injection: enabled 2022/10/01 07:46:11 net device setup: enabled 2022/10/01 07:46:11 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 07:46:11 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 07:46:11 USB emulation: enabled 2022/10/01 07:46:11 hci packet injection: enabled 2022/10/01 07:46:11 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 07:46:11 802.15.4 emulation: enabled 2022/10/01 07:46:11 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 07:46:13 starting 8 fuzzer processes 07:46:13 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0xda, 0x97}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000140)="6ef34fce5787166c261dca6bae51dd76352d7957f3e1642a020ffa3f8eae2c56010cdc40d3e753916239890f95a5e4294613dd4f0af75074d9ccc9db63b26c46a76c1873e4a84f4197375cd94cec40b31e8de7c035b81f0c053f3d4060392ecfa5ba48f5490c584ca6fd768bb9ad52c6b6c76982913dd06eb3ac41b4080649dcbadaec35015a6aa5fd3ab66c8551a88d178d5cb08db1992b622ac740462aa331d4845f1de3567ed142a23772680c718a6936698a195ae6451972b7638b2cb7ed4f3fe86603cb8bd189b7eeb02a493a46e88f3e14c737ac044ee1", &(0x7f0000000240)=""/151) r1 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='!\'$-!*-\x00', 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "345207ab25b48e7035dbaa3f7a71712824a7eb5d4a852dcfe1ebe7b382dfe3e7ca84ea4f7d7f9145a3606243f0a2a2e66b65dc599b00f5de556bddc34d66c6f5", 0x39}, 0x48, r1) r3 = add_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="c28a51b34fcb954306cb328ee58e599092efc436538e64094cb77f69ae08e3bf7774d0b7b6780cef81b0ede3b6cd23f43c5fa60c3c1153f7eaf4ddb3d241c0083b589fd18aadcbb6481115abd548588f6bc8ffe41cc78fd46a617bdb4a355c1f65e858707043f1ef081b252e8d8600babd5ff1cd1c79b50b2a70095ab9723a755f61b9c9f18b4e2947f19d5fe27b0b02d7598a17c0fc203e7a4559cd8db795c901b746524a9048a689d7932f547d0578989ca9e50122", 0xb6, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000600)=""/108, 0x6c) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r0) r5 = add_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)="ed97158bc54626eb0b49f1b8b0860818", 0x10, r4) add_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="6d5ec6c6ee8d740af89cb54d76de903677b75c000d14ce5591084c0af812b387c5bdc9df627c219750e30b05763820bbc91cff5adb38b7ab1c29068a61ff7cbc8c4050346a23beb35b9924d18c060fba2b9838f2f87cc47185d2b4126bf24dc5487898000bb97d717191065fb72d94fe8ce153b9926e8e459cd4e40c181ba30fcba69c6077b91fabcaf4512689f72cfdf574cc771ec5", 0x96, r2) keyctl$describe(0x6, r0, &(0x7f0000000900), 0x0) r6 = request_key(&(0x7f0000000940)='encrypted\x00', &(0x7f0000000980)={'syz', 0x1}, &(0x7f00000009c0)='}\x00', r2) keyctl$read(0xb, r6, &(0x7f0000000a00)=""/40, 0x28) request_key(&(0x7f0000000a40)='dns_resolver\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)='pkcs1', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000b00)='blacklist\x00', &(0x7f0000000b40)=@chain={'key_or_keyring:', r3}) r7 = add_key(&(0x7f0000000c40)='big_key\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)="968870f5abe4e13d9051833c6e0d59a91dac0219ccd3d7382aee60f24815446e1fbaae58fef83e188176a2dc94b59c0e09acabfde60f575ed8a8", 0x3a, r5) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)='fscrypt:', r7) r8 = add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @desc1}, &(0x7f0000000d80)={0x0, "6df68567cba1f98f6d78cbf8ce06280b9a5189ecf69b60fcab7e546f4b19e053669ce9629bf0a8104f992ce7cba1fd833ca320ecee11bd27ee5117a747f677db", 0x26}, 0x48, r3) keyctl$link(0x8, r4, r8) keyctl$unlink(0x9, r5, r1) 07:46:13 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r6 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r6, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) fstat(r6, &(0x7f0000006b40)) r7 = io_uring_setup(0xc34, &(0x7f0000006bc0)={0x0, 0x216e, 0x4, 0x0, 0x6c, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000006c40)=r3, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000006d80)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006cc0)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6e71}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:46:13 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40882) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x44082) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r1, 0x8070c4d090e26528, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/snd/timer\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040804}, 0x8810) r3 = memfd_secret(0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) sendto$packet(r3, &(0x7f0000000700)="090d08c5d583db8768df53cc60208f7e4c9c5af88c1df4580fce974ec116af2a3d892012946fedf2920ca24c218485ef13635c99e4c9209e5d8e314c011db982e201b60a68d8f4a576315a2c1505e728408027d860c6a3521a4942f938b1ebfbacb96b1685d83ec81f07ce68cb19ff9952f55cc454654304b95ae5711cd450b6ab453fbfc3581d", 0x87, 0x4040010, &(0x7f00000007c0)={0x11, 0x1c, 0x0, 0x1, 0x45, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000900)={0x1, 0x80000000, 0x60, 0x0, 0x1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r7) 07:46:13 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{&(0x7f0000000140)=@caif=@dbg, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/195, 0xc3}], 0x5, &(0x7f0000000500)}, 0x9}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f0000001900)=[{&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/120, 0x78}, {&(0x7f0000001840)=""/153, 0x99}], 0x5, &(0x7f0000001980)=""/225, 0xe1}, 0x9}, {{&(0x7f0000001a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/41, 0x29}, {&(0x7f0000002b40)=""/60, 0x3c}, {&(0x7f0000002b80)=""/41, 0x29}, {&(0x7f0000002bc0)=""/93, 0x5d}, {&(0x7f0000002c40)=""/243, 0xf3}, {&(0x7f0000002d40)=""/182, 0xb6}, {&(0x7f0000002e00)=""/217, 0xd9}], 0x8, &(0x7f0000002f80)=""/102, 0x66}, 0x7}, {{&(0x7f0000003000)=@ax25={{0x3, @bcast}, [@default, @bcast, @netrom, @rose, @netrom, @netrom, @netrom, @default]}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003080)=""/241, 0xf1}, {&(0x7f0000003180)=""/217, 0xd9}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/249, 0xf9}], 0x4, &(0x7f00000043c0)=""/106, 0x6a}}, {{&(0x7f0000004440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005700)=[{&(0x7f00000044c0)=""/63, 0x3f}, {&(0x7f0000004500)=""/205, 0xcd}, {&(0x7f0000004600)=""/41, 0x29}, {&(0x7f0000004640)=""/13, 0xd}, {&(0x7f0000004680)=""/11, 0xb}, {&(0x7f00000046c0)=""/8, 0x8}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x7, &(0x7f0000005780)=""/181, 0xb5}, 0x10040000}], 0x5, 0x140, &(0x7f00000059c0)={r0, r1+60000000}) getpeername(r2, &(0x7f0000005a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000005a80)=0x80) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000005ac0)={0x21, @loopback, 0x4e20, 0x1, 'lblcr\x00', 0x20, 0xd9, 0x10}, 0x2c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000005bc0)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b40)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x20000800) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000005d00)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x48, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48801) r4 = add_key$fscrypt_v1(&(0x7f0000005d40), &(0x7f0000005d80)={'fscrypt:', @auto=[0x35, 0x32, 0x0, 0x30, 0x65, 0x61, 0x31, 0x65, 0x39, 0x38, 0x32, 0x0, 0x37, 0x35, 0x0, 0x32]}, &(0x7f0000005dc0)={0x0, "5dd90f428c419950c97b714dc3dea197a81b6f35cf8c147f2af2c8bda60a3a42d5caa2031e27baeb1e1f978538a6294b6863a818e22d71149eccb21e1bcc33f8", 0x36}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000005e40)={r4, 0x0, 0x4f}, &(0x7f0000005e80)={'enc=', 'oaep', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000005f00), &(0x7f0000005f40)=""/79) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000008a00)={&(0x7f0000008940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000089c0)={&(0x7f0000008980)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20040084) recvmmsg(r3, &(0x7f000000d180)=[{{&(0x7f0000008a40)=@pppol2tp, 0x80, &(0x7f0000008c00)=[{&(0x7f0000008ac0)=""/180, 0xb4}, {&(0x7f0000008b80)=""/45, 0x2d}, {&(0x7f0000008bc0)=""/35, 0x23}], 0x3, &(0x7f0000008c40)=""/136, 0x88}, 0x1}, {{&(0x7f0000008d00)=@un=@abs, 0x80, &(0x7f0000008dc0)=[{&(0x7f0000008d80)=""/22, 0x16}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f000000a2c0)=[{&(0x7f0000008e00)=""/12, 0xc}, {&(0x7f0000008e40)=""/206, 0xce}, {&(0x7f0000008f40)=""/73, 0x49}, {&(0x7f0000008fc0)=""/122, 0x7a}, {&(0x7f0000009040)=""/246, 0xf6}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f000000a140)=""/106, 0x6a}, {&(0x7f000000a1c0)=""/8, 0x8}, {&(0x7f000000a200)=""/92, 0x5c}, {&(0x7f000000a280)=""/63, 0x3f}], 0xa, &(0x7f000000a380)=""/60, 0x3c}, 0x3}, {{&(0x7f000000a3c0)=@phonet, 0x80, &(0x7f000000a940)=[{&(0x7f000000a440)=""/41, 0x29}, {&(0x7f000000a480)=""/21, 0x15}, {&(0x7f000000a4c0)=""/115, 0x73}, {&(0x7f000000a540)=""/211, 0xd3}, {&(0x7f000000a640)=""/107, 0x6b}, {&(0x7f000000a6c0)=""/218, 0xda}, {&(0x7f000000a7c0)=""/155, 0x9b}, {&(0x7f000000a880)=""/164, 0xa4}], 0x8, &(0x7f000000a9c0)=""/236, 0xec}, 0x92a}, {{&(0x7f000000aac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f000000ad80)=[{&(0x7f000000ab40)=""/218, 0xda}, {&(0x7f000000ac40)=""/9, 0x9}, {&(0x7f000000ac80)=""/241, 0xf1}], 0x3, &(0x7f000000adc0)=""/227, 0xe3}, 0x200}, {{&(0x7f000000aec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000d040)=[{&(0x7f000000af40)}, {&(0x7f000000af80)=""/4096, 0x1000}, {&(0x7f000000bf80)=""/9, 0x9}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/96, 0x60}], 0x5, &(0x7f000000d0c0)=""/137, 0x89}, 0xed}], 0x6, 0x10040, &(0x7f000000d300)={0x77359400}) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f000000d340)={0x89, @multicast2, 0x4e21, 0x3, 'dh\x00', 0x35, 0xc1b0, 0xe}, 0x2c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f000000d3c0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f000000d480)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000d440)={&(0x7f000000d400)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f000000d4c0)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f000000d500)={0x0, @remote, 0x4e23, 0x1, 'none\x00', 0x1, 0x3, 0x60}, 0x2c) socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, &(0x7f000000d540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000d580)=0x14, 0x800) [ 52.757084] audit: type=1400 audit(1664610373.100:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:46:13 executing program 5: socket$inet(0x2, 0x0, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80c00) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x15d, 0x4b, 0x5]}, &(0x7f0000000180)=0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x6, 0x2, 0x31c, 0x0, 0x6}) r2 = socket$inet(0x2, 0x55dd671d584a7d21, 0x5) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x52, [0xfffffffffffffffe, 0x9, 0x200, 0x800, 0x0, 0xb582], 0x3, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000002c0)=""/82}, &(0x7f00000003c0)=0x78) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x0, 0x1, 0x100, 0x0, 0x200}}) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000440)=""/220, &(0x7f0000000540)=0xdc) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x0, 0x2, 0x8, 0x2, 0xfff}, 0x0, 0x1, 0xdec7}) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000640)={{0x2, 0x4e24, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x4e21, @local}, 'ip6erspan0\x00'}) connect$packet(r1, &(0x7f00000006c0)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in=@loopback, @in=@private}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000940)=0xe8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) 07:46:13 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) r1 = socket$inet(0x2, 0x5, 0x3f) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005080)={{{@in=@local, @in=@dev}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000005180)=0xe8) clock_gettime(0x0, &(0x7f000000ec00)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000e9c0)=[{{&(0x7f0000005940)=@generic, 0x80, &(0x7f0000007c80)=[{&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/159, 0x9f}, {&(0x7f0000006a80)=""/191, 0xbf}, {&(0x7f0000006b40)=""/171, 0xab}, {&(0x7f0000006c00)=""/77, 0x4d}, {&(0x7f0000006c80)=""/4096, 0x1000}], 0x6, &(0x7f0000007d00)=""/58, 0x3a}, 0x10000}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000007d40)=""/206, 0xce}], 0x1, &(0x7f0000007e80)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000008e80)=@caif=@dgm, 0x80, &(0x7f0000009080)=[{&(0x7f0000008f00)=""/167, 0xa7}, {&(0x7f0000008fc0)=""/6, 0x6}, {&(0x7f0000009000)=""/37, 0x25}, {&(0x7f0000009040)=""/32, 0x20}], 0x4, &(0x7f00000090c0)=""/182, 0xb6}, 0x10001}, {{&(0x7f0000009180)=@ax25={{0x3, @rose}, [@bcast, @null, @remote, @rose, @remote, @remote, @netrom, @netrom]}, 0x80, &(0x7f000000b400)=[{&(0x7f0000009200)=""/120, 0x78}, {&(0x7f0000009280)=""/4096, 0x1000}, {&(0x7f000000a280)=""/4096, 0x1000}, {&(0x7f000000b280)=""/177, 0xb1}, {&(0x7f000000b340)=""/147, 0x93}], 0x5, &(0x7f000000b480)=""/144, 0x90}, 0x601a8c1d}, {{&(0x7f000000b540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000c700)=[{&(0x7f000000b5c0)=""/136, 0x88}, {&(0x7f000000b680)=""/4096, 0x1000}, {&(0x7f000000c680)=""/82, 0x52}], 0x3, &(0x7f000000c740)}, 0x1}, {{&(0x7f000000c780)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f000000d900)=[{&(0x7f000000c800)=""/16, 0x10}, {&(0x7f000000c840)=""/4096, 0x1000}, {&(0x7f000000d840)=""/173, 0xad}], 0x3, &(0x7f000000d940)=""/145, 0x91}, 0x7f84}, {{&(0x7f000000da00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f000000e240)=[{&(0x7f000000da80)=""/133, 0x85}, {&(0x7f000000db40)=""/185, 0xb9}, {&(0x7f000000dc00)=""/208, 0xd0}, {&(0x7f000000dd00)=""/218, 0xda}, {&(0x7f000000de00)=""/107, 0x6b}, {&(0x7f000000de80)=""/165, 0xa5}, {&(0x7f000000df40)=""/197, 0xc5}, {&(0x7f000000e040)=""/59, 0x3b}, {&(0x7f000000e080)=""/138, 0x8a}, {&(0x7f000000e140)=""/216, 0xd8}], 0xa, &(0x7f000000e300)=""/82, 0x52}, 0x6}, {{0x0, 0x0, &(0x7f000000e600)=[{&(0x7f000000e380)=""/167, 0xa7}, {&(0x7f000000e440)=""/40, 0x28}, {&(0x7f000000e480)=""/62, 0x3e}, {&(0x7f000000e4c0)=""/146, 0x92}, {&(0x7f000000e580)=""/23, 0x17}, {&(0x7f000000e5c0)}], 0x6, &(0x7f000000e680)=""/61, 0x3d}, 0x4}, {{0x0, 0x0, &(0x7f000000e880)=[{&(0x7f000000e6c0)=""/144, 0x90}, {&(0x7f000000e780)=""/220, 0xdc}], 0x2, &(0x7f000000e8c0)=""/194, 0xc2}, 0x8}], 0x9, 0x20, &(0x7f000000ec40)={r2, r3+60000000}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f000000ecc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f000000ed80)={&(0x7f000000ec80), 0xc, &(0x7f000000ed40)={&(0x7f000000ed00)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x40040) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f000000ee80)={&(0x7f000000edc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000ee40)={&(0x7f000000ee00)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x8084) recvmmsg(r1, &(0x7f0000016a00)=[{{0x0, 0x0, &(0x7f0000013300)=[{&(0x7f000000eec0)=""/103, 0x67}, {&(0x7f000000ef40)=""/146, 0x92}, {&(0x7f000000f000)=""/82, 0x52}, {&(0x7f000000f080)=""/4096, 0x1000}, {&(0x7f0000010080)=""/226, 0xe2}, {&(0x7f0000010180)=""/4096, 0x1000}, {&(0x7f0000011180)=""/207, 0xcf}, {&(0x7f0000011280)=""/121, 0x79}, {&(0x7f0000011300)=""/4096, 0x1000}, {&(0x7f0000012300)=""/4096, 0x1000}], 0xa}, 0x1}, {{0x0, 0x0, &(0x7f0000013400)=[{&(0x7f00000133c0)=""/34, 0x22}], 0x1, &(0x7f0000013440)=""/223, 0xdf}, 0x80000001}, {{&(0x7f0000013540)=@caif, 0x80, &(0x7f0000014740)=[{&(0x7f00000135c0)=""/4096, 0x1000}, {&(0x7f00000145c0)=""/224, 0xe0}, {&(0x7f00000146c0)=""/96, 0x60}], 0x3}, 0x8}, {{&(0x7f0000014780)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000014900)=[{&(0x7f0000014800)=""/148, 0x94}, {&(0x7f00000148c0)=""/18, 0x12}], 0x2}, 0x9}, {{&(0x7f0000014940)=@generic, 0x80, &(0x7f0000014b80)=[{&(0x7f00000149c0)=""/227, 0xe3}, {&(0x7f0000014ac0)=""/67, 0x43}, {&(0x7f0000014b40)=""/21, 0x15}], 0x3, &(0x7f0000014bc0)=""/91, 0x5b}, 0x1}, {{&(0x7f0000014c40)=@rc, 0x80, &(0x7f0000015d80)=[{&(0x7f0000014cc0)=""/176, 0xb0}, {&(0x7f0000014d80)=""/4096, 0x1000}], 0x2, &(0x7f0000015dc0)=""/239, 0xef}, 0x2}, {{0x0, 0x0, &(0x7f0000015f40)=[{&(0x7f0000015ec0)=""/79, 0x4f}], 0x1, &(0x7f0000015f80)=""/100, 0x64}, 0x7}, {{&(0x7f0000016000)=@can={0x1d, 0x0}, 0x80, &(0x7f00000161c0)=[{&(0x7f0000016080)=""/64, 0x40}, {&(0x7f00000160c0)=""/200, 0xc8}], 0x2, &(0x7f0000016200)=""/122, 0x7a}, 0x289c3efc}, {{0x0, 0x0, &(0x7f0000016480)=[{&(0x7f0000016280)=""/74, 0x4a}, {&(0x7f0000016300)=""/186, 0xba}, {&(0x7f00000163c0)=""/133, 0x85}], 0x3, &(0x7f00000164c0)=""/240, 0xf0}, 0x1}, {{&(0x7f00000165c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000016940)=[{&(0x7f0000016640)=""/202, 0xca}, {&(0x7f0000016740)=""/216, 0xd8}, {&(0x7f0000016840)=""/106, 0x6a}, {&(0x7f00000168c0)=""/59, 0x3b}, {&(0x7f0000016900)=""/12, 0xc}], 0x5, &(0x7f00000169c0)=""/62, 0x3e}, 0xb268}], 0xa, 0x40000000, &(0x7f0000016c80)={0x0, 0x989680}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000016cc0)={0x0, 0x1, 0x6, @remote}, 0x10) socketpair(0x8, 0x0, 0xfffffb37, &(0x7f0000016d00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept(r8, &(0x7f0000016d40)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000016dc0)=0x80) pipe2(&(0x7f0000016e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4$packet(r8, &(0x7f0000016f40)={0x11, 0x0, 0x0}, &(0x7f0000016f80)=0x14, 0x800) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000016fc0)={r11, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000017040), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000017140)={&(0x7f0000017000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000017100)={&(0x7f0000017080)={0x54, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x40000) r13 = accept$packet(r4, 0x0, &(0x7f0000017180)) sendto$packet(r13, &(0x7f00000171c0)="c477ded704ab179a46832994df24e3653790410bf1052b371db023a38d9d31e8f3e3ec6c96865d33ef31e284ddb7ab380f597762e0b9dab2", 0x38, 0x100, &(0x7f0000017200)={0x11, 0xf5, r6, 0x1, 0x5, 0x6, @broadcast}, 0x14) 07:46:13 executing program 7: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = memfd_secret(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c4}, 0x40000d0) socket$inet(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24010800}, 0x20044081) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1, &(0x7f0000000ac0)=""/226, 0xe2}, 0x33}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/157, 0x9d}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/208, 0xd0}], 0x3, &(0x7f0000000f00)=""/195, 0xc3}, 0x7ff}, {{&(0x7f0000001000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)}], 0x1}, 0x9}, {{&(0x7f0000001100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/217, 0xd9}], 0x1, &(0x7f00000012c0)=""/168, 0xa8}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/101, 0x65}], 0x4, &(0x7f00000015c0)=""/119, 0x77}, 0x77d}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)=""/22, 0x16}], 0x1, &(0x7f00000016c0)=""/204, 0xcc}, 0x8}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/169, 0xa9}], 0x3, &(0x7f0000001a00)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000001ac0)=@nfc_llcp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/42, 0x2a}, {&(0x7f0000001b80)=""/89, 0x59}, {&(0x7f0000001c00)=""/112, 0x70}, {&(0x7f0000001c80)=""/9, 0x9}, {&(0x7f0000001cc0)=""/67, 0x43}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/247, 0xf7}], 0x7, &(0x7f0000001f80)=""/216, 0xd8}, 0x2}], 0x8, 0x12020, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x30}}, 0x48000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000002540)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000025c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0xf692e404a851cd26}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x22d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000002740)=0x40) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000002780)={'raw\x00', 0x2, [{}, {}]}, 0x48) 07:46:13 executing program 6: r0 = memfd_secret(0x80000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x30000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x100, 0xfffffffc, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x81) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x88, 0x0, 0x210, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x3b2e, 0x4, 0x1, 0x8f]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x10000, 0x5, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x48044) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}}, 0x20004000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x24}}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}}, 0x4000) recvmsg$unix(r0, &(0x7f0000002100)={&(0x7f0000001dc0), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/248, 0xf8}, {&(0x7f0000001f40)=""/165, 0xa5}], 0x2, &(0x7f0000002040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x58, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x40841) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c501895bdb52"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40814) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4050) [ 54.079005] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.080966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.082514] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.086842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.089038] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.090490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.095934] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.154223] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.156072] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.160916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.165167] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.166292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.168392] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.169527] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.173829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.177612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.179873] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.181459] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.183762] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.185282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.187140] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.189110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.190514] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.192424] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.194154] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.195286] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.196821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.198400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.201167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.202412] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.205996] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.207032] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.220508] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.222446] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.239965] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.283873] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.283936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.287631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.289345] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.290610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.293474] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.295030] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.299064] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.300864] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.302282] Bluetooth: hci1: HCI_REQ-0x0c1a [ 54.310530] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.316816] Bluetooth: hci7: HCI_REQ-0x0c1a [ 54.329843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.334899] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.338411] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.339863] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.341431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.342909] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.352566] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.354411] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.410938] Bluetooth: hci5: HCI_REQ-0x0c1a [ 56.159873] Bluetooth: hci0: command 0x0409 tx timeout [ 56.223913] Bluetooth: hci3: command 0x0409 tx timeout [ 56.223975] Bluetooth: hci2: command 0x0409 tx timeout [ 56.288071] Bluetooth: hci4: command 0x0409 tx timeout [ 56.352664] Bluetooth: hci7: command 0x0409 tx timeout [ 56.352710] Bluetooth: hci1: command 0x0409 tx timeout [ 56.415612] Bluetooth: hci6: command 0x0409 tx timeout [ 56.416721] Bluetooth: hci5: command 0x0409 tx timeout [ 58.207636] Bluetooth: hci0: command 0x041b tx timeout [ 58.273622] Bluetooth: hci2: command 0x041b tx timeout [ 58.273662] Bluetooth: hci3: command 0x041b tx timeout [ 58.336670] Bluetooth: hci4: command 0x041b tx timeout [ 58.399691] Bluetooth: hci7: command 0x041b tx timeout [ 58.400467] Bluetooth: hci1: command 0x041b tx timeout [ 58.463825] Bluetooth: hci5: command 0x041b tx timeout [ 58.464609] Bluetooth: hci6: command 0x041b tx timeout [ 60.256592] Bluetooth: hci0: command 0x040f tx timeout [ 60.319595] Bluetooth: hci3: command 0x040f tx timeout [ 60.320618] Bluetooth: hci2: command 0x040f tx timeout [ 60.383623] Bluetooth: hci4: command 0x040f tx timeout [ 60.447610] Bluetooth: hci1: command 0x040f tx timeout [ 60.448052] Bluetooth: hci7: command 0x040f tx timeout [ 60.511605] Bluetooth: hci6: command 0x040f tx timeout [ 60.512037] Bluetooth: hci5: command 0x040f tx timeout [ 62.303716] Bluetooth: hci0: command 0x0419 tx timeout [ 62.367659] Bluetooth: hci2: command 0x0419 tx timeout [ 62.368446] Bluetooth: hci3: command 0x0419 tx timeout [ 62.431649] Bluetooth: hci4: command 0x0419 tx timeout [ 62.495697] Bluetooth: hci7: command 0x0419 tx timeout [ 62.496487] Bluetooth: hci1: command 0x0419 tx timeout [ 62.559631] Bluetooth: hci5: command 0x0419 tx timeout [ 62.560404] Bluetooth: hci6: command 0x0419 tx timeout [ 115.966381] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 115.968252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.970447] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.971837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.974843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.979909] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.981326] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 115.982933] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 115.986133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 115.990249] Bluetooth: hci0: HCI_REQ-0x0c1a [ 115.990895] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 115.993471] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 115.995224] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 116.003981] Bluetooth: hci1: HCI_REQ-0x0c1a [ 116.100709] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.102456] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 116.110357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 116.111762] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.127107] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.128382] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 116.140523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 116.142481] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 116.143970] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 116.148899] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 116.150979] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 116.152398] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 116.156644] Bluetooth: hci7: HCI_REQ-0x0c1a [ 116.158033] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 116.169460] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 116.179790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 116.181313] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.183406] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 116.185598] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 116.189027] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 116.190527] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.191710] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 116.192954] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 116.194115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.195152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.196365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 116.197692] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 116.201618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 116.204025] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 116.205233] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 116.206926] Bluetooth: hci3: HCI_REQ-0x0c1a [ 116.207384] Bluetooth: hci4: HCI_REQ-0x0c1a [ 116.214213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 116.215763] Bluetooth: hci5: HCI_REQ-0x0c1a [ 116.232777] Bluetooth: hci6: HCI_REQ-0x0c1a [ 118.047704] Bluetooth: hci0: command 0x0409 tx timeout [ 118.049338] Bluetooth: hci1: command 0x0409 tx timeout [ 118.050601] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 118.175856] Bluetooth: hci7: command 0x0409 tx timeout [ 118.240277] Bluetooth: hci3: command 0x0409 tx timeout [ 118.241410] Bluetooth: hci5: command 0x0409 tx timeout [ 118.242401] Bluetooth: hci4: command 0x0409 tx timeout [ 118.303865] Bluetooth: hci6: command 0x0409 tx timeout [ 120.095606] Bluetooth: hci1: command 0x041b tx timeout [ 120.096074] Bluetooth: hci0: command 0x041b tx timeout [ 120.223624] Bluetooth: hci7: command 0x041b tx timeout [ 120.287741] Bluetooth: hci4: command 0x041b tx timeout [ 120.288677] Bluetooth: hci5: command 0x041b tx timeout [ 120.289510] Bluetooth: hci3: command 0x041b tx timeout [ 120.351739] Bluetooth: hci6: command 0x041b tx timeout [ 122.143631] Bluetooth: hci0: command 0x040f tx timeout [ 122.144304] Bluetooth: hci1: command 0x040f tx timeout [ 122.271605] Bluetooth: hci7: command 0x040f tx timeout [ 122.335694] Bluetooth: hci3: command 0x040f tx timeout [ 122.336253] Bluetooth: hci5: command 0x040f tx timeout [ 122.336828] Bluetooth: hci4: command 0x040f tx timeout [ 122.399656] Bluetooth: hci6: command 0x040f tx timeout [ 122.655589] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 124.192718] Bluetooth: hci1: command 0x0419 tx timeout [ 124.193190] Bluetooth: hci0: command 0x0419 tx timeout [ 124.319736] Bluetooth: hci7: command 0x0419 tx timeout [ 124.384635] Bluetooth: hci4: command 0x0419 tx timeout [ 124.385358] Bluetooth: hci5: command 0x0419 tx timeout [ 124.386112] Bluetooth: hci3: command 0x0419 tx timeout [ 124.447618] Bluetooth: hci6: command 0x0419 tx timeout [ 127.200689] Bluetooth: hci2: Opcode 0x c03 failed: -110 [ 129.882478] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.885886] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.887502] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.892148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.895055] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.897346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.912131] Bluetooth: hci2: HCI_REQ-0x0c1a [ 131.936700] Bluetooth: hci2: command 0x0409 tx timeout [ 133.984618] Bluetooth: hci2: command 0x041b tx timeout [ 136.032595] Bluetooth: hci2: command 0x040f tx timeout [ 138.079609] Bluetooth: hci2: command 0x0419 tx timeout 07:48:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r6 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r6, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) fstat(r6, &(0x7f0000006b40)) r7 = io_uring_setup(0xc34, &(0x7f0000006bc0)={0x0, 0x216e, 0x4, 0x0, 0x6c, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000006c40)=r3, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000006d80)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006cc0)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6e71}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:48:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r6 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r6, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) fstat(r6, &(0x7f0000006b40)) r7 = io_uring_setup(0xc34, &(0x7f0000006bc0)={0x0, 0x216e, 0x4, 0x0, 0x6c, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000006c40)=r3, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000006d80)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006cc0)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6e71}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:48:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r6 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r6, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) fstat(r6, &(0x7f0000006b40)) r7 = io_uring_setup(0xc34, &(0x7f0000006bc0)={0x0, 0x216e, 0x4, 0x0, 0x6c, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000006c40)=r3, 0x1) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000006d80)={&(0x7f0000006c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006d40)={&(0x7f0000006cc0)={0x64, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6e71}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40001}, 0x800) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:48:08 executing program 7: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = memfd_secret(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c4}, 0x40000d0) socket$inet(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24010800}, 0x20044081) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1, &(0x7f0000000ac0)=""/226, 0xe2}, 0x33}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/157, 0x9d}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/208, 0xd0}], 0x3, &(0x7f0000000f00)=""/195, 0xc3}, 0x7ff}, {{&(0x7f0000001000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)}], 0x1}, 0x9}, {{&(0x7f0000001100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/217, 0xd9}], 0x1, &(0x7f00000012c0)=""/168, 0xa8}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/101, 0x65}], 0x4, &(0x7f00000015c0)=""/119, 0x77}, 0x77d}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)=""/22, 0x16}], 0x1, &(0x7f00000016c0)=""/204, 0xcc}, 0x8}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/169, 0xa9}], 0x3, &(0x7f0000001a00)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000001ac0)=@nfc_llcp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/42, 0x2a}, {&(0x7f0000001b80)=""/89, 0x59}, {&(0x7f0000001c00)=""/112, 0x70}, {&(0x7f0000001c80)=""/9, 0x9}, {&(0x7f0000001cc0)=""/67, 0x43}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/247, 0xf7}], 0x7, &(0x7f0000001f80)=""/216, 0xd8}, 0x2}], 0x8, 0x12020, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x30}}, 0x48000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000002540)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000025c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0xf692e404a851cd26}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x22d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000002740)=0x40) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000002780)={'raw\x00', 0x2, [{}, {}]}, 0x48) 07:48:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r6 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r6, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) fstat(r6, &(0x7f0000006b40)) r7 = io_uring_setup(0xc34, &(0x7f0000006bc0)={0x0, 0x216e, 0x4, 0x0, 0x6c, 0x0, r2}) io_uring_register$IORING_REGISTER_EVENTFD(r7, 0x4, &(0x7f0000006c40)=r3, 0x1) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:48:08 executing program 7: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = memfd_secret(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c4}, 0x40000d0) socket$inet(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24010800}, 0x20044081) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1, &(0x7f0000000ac0)=""/226, 0xe2}, 0x33}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/157, 0x9d}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/208, 0xd0}], 0x3, &(0x7f0000000f00)=""/195, 0xc3}, 0x7ff}, {{&(0x7f0000001000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)}], 0x1}, 0x9}, {{&(0x7f0000001100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/217, 0xd9}], 0x1, &(0x7f00000012c0)=""/168, 0xa8}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/101, 0x65}], 0x4, &(0x7f00000015c0)=""/119, 0x77}, 0x77d}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)=""/22, 0x16}], 0x1, &(0x7f00000016c0)=""/204, 0xcc}, 0x8}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/169, 0xa9}], 0x3, &(0x7f0000001a00)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000001ac0)=@nfc_llcp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/42, 0x2a}, {&(0x7f0000001b80)=""/89, 0x59}, {&(0x7f0000001c00)=""/112, 0x70}, {&(0x7f0000001c80)=""/9, 0x9}, {&(0x7f0000001cc0)=""/67, 0x43}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/247, 0xf7}], 0x7, &(0x7f0000001f80)=""/216, 0xd8}, 0x2}], 0x8, 0x12020, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x30}}, 0x48000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000002540)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000025c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0xf692e404a851cd26}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x22d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000002740)=0x40) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000002780)={'raw\x00', 0x2, [{}, {}]}, 0x48) 07:48:08 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r3, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r6 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r6, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r6, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6) fstat(r6, &(0x7f0000006b40)) io_uring_setup(0xc34, &(0x7f0000006bc0)={0x0, 0x216e, 0x4, 0x0, 0x6c, 0x0, r2}) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:48:09 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r5 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r5, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) fstat(r5, &(0x7f0000006b40)) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) [ 180.639839] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.641166] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.642123] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.643685] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.646070] Call Trace: [ 180.646515] [ 180.646952] __schedule+0x893/0x2470 [ 180.647651] ? io_schedule_timeout+0x150/0x150 [ 180.648421] ? do_raw_spin_lock+0x121/0x260 [ 180.649277] ? rwlock_bug.part.0+0x90/0x90 [ 180.649978] schedule+0xda/0x1b0 [ 180.650499] rescuer_thread+0x851/0xdb0 [ 180.651143] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.651949] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.652778] ? lockdep_hardirqs_on+0x79/0x100 [ 180.653489] ? worker_thread+0x1260/0x1260 [ 180.654200] kthread+0x2ed/0x3a0 [ 180.654783] ? kthread_complete_and_exit+0x40/0x40 [ 180.655565] ret_from_fork+0x22/0x30 [ 180.656167] [ 180.656571] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.657596] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.658387] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.659585] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.660901] Call Trace: [ 180.661296] [ 180.661700] __schedule+0x893/0x2470 [ 180.662297] ? io_schedule_timeout+0x150/0x150 [ 180.663038] ? do_raw_spin_lock+0x121/0x260 [ 180.663754] ? rwlock_bug.part.0+0x90/0x90 [ 180.664441] schedule+0xda/0x1b0 [ 180.665025] rescuer_thread+0x851/0xdb0 [ 180.665677] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.666455] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.667266] ? lockdep_hardirqs_on+0x79/0x100 [ 180.668011] ? worker_thread+0x1260/0x1260 [ 180.668730] kthread+0x2ed/0x3a0 [ 180.669261] ? kthread_complete_and_exit+0x40/0x40 [ 180.670064] ret_from_fork+0x22/0x30 [ 180.670712] [ 180.671079] INFO: task netns:6 blocked for more than 143 seconds. [ 180.672029] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.672892] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.674080] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.675357] Call Trace: [ 180.675797] [ 180.676155] __schedule+0x893/0x2470 [ 180.676812] ? io_schedule_timeout+0x150/0x150 [ 180.677516] ? do_raw_spin_lock+0x121/0x260 [ 180.678223] ? rwlock_bug.part.0+0x90/0x90 [ 180.678932] schedule+0xda/0x1b0 [ 180.679467] rescuer_thread+0x851/0xdb0 [ 180.680124] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.680957] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.681763] ? lockdep_hardirqs_on+0x79/0x100 [ 180.682461] ? worker_thread+0x1260/0x1260 [ 180.683160] kthread+0x2ed/0x3a0 [ 180.683742] ? kthread_complete_and_exit+0x40/0x40 [ 180.684522] ret_from_fork+0x22/0x30 [ 180.685176] [ 180.685587] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 180.686614] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.687410] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.688592] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 180.689878] Workqueue: 0x0 (rcu_gp) [ 180.690463] Call Trace: [ 180.690903] [ 180.691265] __schedule+0x893/0x2470 [ 180.691896] ? io_schedule_timeout+0x150/0x150 [ 180.692673] schedule+0xda/0x1b0 [ 180.693212] worker_thread+0x15f/0x1260 [ 180.693896] ? process_one_work+0x16a0/0x16a0 [ 180.694633] kthread+0x2ed/0x3a0 [ 180.695164] ? kthread_complete_and_exit+0x40/0x40 [ 180.695963] ret_from_fork+0x22/0x30 [ 180.696608] [ 180.696972] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.698007] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.698849] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.700043] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 180.701353] Workqueue: 0x0 (events_highpri) [ 180.702080] Call Trace: [ 180.702476] [ 180.702902] __schedule+0x893/0x2470 [ 180.703495] ? io_schedule_timeout+0x150/0x150 [ 180.704642] schedule+0xda/0x1b0 [ 180.705191] worker_thread+0x15f/0x1260 [ 180.705887] ? process_one_work+0x16a0/0x16a0 [ 180.706630] kthread+0x2ed/0x3a0 [ 180.707160] ? kthread_complete_and_exit+0x40/0x40 [ 180.707956] ret_from_fork+0x22/0x30 [ 180.708630] [ 180.708999] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.710044] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.710880] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.712082] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.713399] Call Trace: [ 180.713843] [ 180.714213] __schedule+0x893/0x2470 [ 180.714859] ? io_schedule_timeout+0x150/0x150 [ 180.715596] ? do_raw_spin_lock+0x121/0x260 [ 180.716268] ? rwlock_bug.part.0+0x90/0x90 [ 180.717010] schedule+0xda/0x1b0 [ 180.717601] rescuer_thread+0x851/0xdb0 [ 180.718230] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.719048] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.719873] ? lockdep_hardirqs_on+0x79/0x100 [ 180.720630] ? worker_thread+0x1260/0x1260 [ 180.721302] kthread+0x2ed/0x3a0 [ 180.721891] ? kthread_complete_and_exit+0x40/0x40 [ 180.722703] ret_from_fork+0x22/0x30 [ 180.723320] [ 180.723727] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.724832] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.725691] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.726875] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.728186] Call Trace: [ 180.728646] [ 180.729013] __schedule+0x893/0x2470 [ 180.729659] ? io_schedule_timeout+0x150/0x150 [ 180.730363] ? mark_held_locks+0x9e/0xe0 [ 180.731039] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.731856] schedule+0xda/0x1b0 [ 180.732393] rcu_tasks_one_gp+0x3db/0xc10 [ 180.733124] rcu_tasks_kthread+0x80/0xa0 [ 180.733790] ? rcu_tasks_postscan+0x10/0x10 [ 180.734463] kthread+0x2ed/0x3a0 [ 180.735042] ? kthread_complete_and_exit+0x40/0x40 [ 180.735844] ret_from_fork+0x22/0x30 [ 180.736471] [ 180.736887] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.737940] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.738791] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.739994] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 180.741306] Workqueue: 0x0 (kblockd) [ 180.741950] Call Trace: [ 180.742345] [ 180.742753] __schedule+0x893/0x2470 [ 180.743355] ? io_schedule_timeout+0x150/0x150 [ 180.744124] schedule+0xda/0x1b0 [ 180.744723] worker_thread+0x15f/0x1260 [ 180.745373] ? process_one_work+0x16a0/0x16a0 [ 180.746114] kthread+0x2ed/0x3a0 [ 180.746687] ? kthread_complete_and_exit+0x40/0x40 [ 180.747445] ret_from_fork+0x22/0x30 [ 180.748092] [ 180.748518] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 180.749629] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.750437] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.751620] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 180.752952] Call Trace: [ 180.753348] [ 180.753746] __schedule+0x893/0x2470 [ 180.754349] ? io_schedule_timeout+0x150/0x150 [ 180.755095] ? do_raw_spin_lock+0x121/0x260 [ 180.755802] ? rwlock_bug.part.0+0x90/0x90 [ 180.756480] schedule+0xda/0x1b0 [ 180.757076] rescuer_thread+0x851/0xdb0 [ 180.757753] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.758516] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.759328] ? lockdep_hardirqs_on+0x79/0x100 [ 180.760076] ? worker_thread+0x1260/0x1260 [ 180.760810] kthread+0x2ed/0x3a0 [ 180.761346] ? kthread_complete_and_exit+0x40/0x40 [ 180.762159] ret_from_fork+0x22/0x30 [ 180.762812] [ 180.763186] INFO: task writeback:28 blocked for more than 143 seconds. [ 180.764207] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.765063] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.766288] task:writeback state:I stack:30176 pid:28 ppid:2 flags:0x00004000 [ 180.767599] Call Trace: [ 180.768000] [ 180.768355] __schedule+0x893/0x2470 [ 180.769021] ? io_schedule_timeout+0x150/0x150 [ 180.769760] ? do_raw_spin_lock+0x121/0x260 [ 180.770431] ? rwlock_bug.part.0+0x90/0x90 [ 180.771141] schedule+0xda/0x1b0 [ 180.771716] rescuer_thread+0x851/0xdb0 [ 180.772339] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.773181] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.774004] ? lockdep_hardirqs_on+0x79/0x100 [ 180.774750] ? worker_thread+0x1260/0x1260 [ 180.775410] kthread+0x2ed/0x3a0 [ 180.775979] ? kthread_complete_and_exit+0x40/0x40 [ 180.776801] ret_from_fork+0x22/0x30 [ 180.777412] [ 180.777893] [ 180.777893] Showing all locks held in the system: [ 180.778855] 1 lock held by rcu_tasks_kthre/11: [ 180.779584] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.781143] 1 lock held by khungtaskd/25: [ 180.781799] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.783235] 2 locks held by in:imklog/200: [ 180.783914] #0: ffff88800ed13268 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 180.785253] #1: ffffffff853fa968 (syslog_lock){+.+.}-{3:3}, at: avc_has_perm_noaudit+0xa2/0x3a0 [ 180.786638] [ 180.786894] ============================================= [ 180.786894] 07:48:27 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'nl802154\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x40882) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x44082) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r1, 0x8070c4d090e26528, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/snd/timer\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040804}, 0x8810) r3 = memfd_secret(0x0) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000340)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r3) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r5, 0x20, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8011) sendto$packet(r3, &(0x7f0000000700)="090d08c5d583db8768df53cc60208f7e4c9c5af88c1df4580fce974ec116af2a3d892012946fedf2920ca24c218485ef13635c99e4c9209e5d8e314c011db982e201b60a68d8f4a576315a2c1505e728408027d860c6a3521a4942f938b1ebfbacb96b1685d83ec81f07ce68cb19ff9952f55cc454654304b95ae5711cd450b6ab453fbfc3581d", 0x87, 0x4040010, &(0x7f00000007c0)={0x11, 0x1c, 0x0, 0x1, 0x45, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x25}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x34}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000900)={0x1, 0x80000000, 0x60, 0x0, 0x1}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r7) 07:48:27 executing program 7: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = memfd_secret(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c4}, 0x40000d0) socket$inet(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24010800}, 0x20044081) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1, &(0x7f0000000ac0)=""/226, 0xe2}, 0x33}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/157, 0x9d}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/208, 0xd0}], 0x3, &(0x7f0000000f00)=""/195, 0xc3}, 0x7ff}, {{&(0x7f0000001000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)}], 0x1}, 0x9}, {{&(0x7f0000001100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/217, 0xd9}], 0x1, &(0x7f00000012c0)=""/168, 0xa8}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/101, 0x65}], 0x4, &(0x7f00000015c0)=""/119, 0x77}, 0x77d}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)=""/22, 0x16}], 0x1, &(0x7f00000016c0)=""/204, 0xcc}, 0x8}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/169, 0xa9}], 0x3, &(0x7f0000001a00)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000001ac0)=@nfc_llcp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/42, 0x2a}, {&(0x7f0000001b80)=""/89, 0x59}, {&(0x7f0000001c00)=""/112, 0x70}, {&(0x7f0000001c80)=""/9, 0x9}, {&(0x7f0000001cc0)=""/67, 0x43}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/247, 0xf7}], 0x7, &(0x7f0000001f80)=""/216, 0xd8}, 0x2}], 0x8, 0x12020, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x30}}, 0x48000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000002540)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000025c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0xf692e404a851cd26}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x22d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000002740)=0x40) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000002780)={'raw\x00', 0x2, [{}, {}]}, 0x48) 07:48:27 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r5 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r5, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) 07:48:27 executing program 6: r0 = memfd_secret(0x80000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x30000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x100, 0xfffffffc, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x81) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x88, 0x0, 0x210, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x3b2e, 0x4, 0x1, 0x8f]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x10000, 0x5, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x48044) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}}, 0x20004000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x24}}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}}, 0x4000) recvmsg$unix(r0, &(0x7f0000002100)={&(0x7f0000001dc0), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/248, 0xf8}, {&(0x7f0000001f40)=""/165, 0xa5}], 0x2, &(0x7f0000002040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x58, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x40841) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c501895bdb52"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40814) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4050) 07:48:27 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0xda, 0x97}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000140)="6ef34fce5787166c261dca6bae51dd76352d7957f3e1642a020ffa3f8eae2c56010cdc40d3e753916239890f95a5e4294613dd4f0af75074d9ccc9db63b26c46a76c1873e4a84f4197375cd94cec40b31e8de7c035b81f0c053f3d4060392ecfa5ba48f5490c584ca6fd768bb9ad52c6b6c76982913dd06eb3ac41b4080649dcbadaec35015a6aa5fd3ab66c8551a88d178d5cb08db1992b622ac740462aa331d4845f1de3567ed142a23772680c718a6936698a195ae6451972b7638b2cb7ed4f3fe86603cb8bd189b7eeb02a493a46e88f3e14c737ac044ee1", &(0x7f0000000240)=""/151) r1 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='!\'$-!*-\x00', 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "345207ab25b48e7035dbaa3f7a71712824a7eb5d4a852dcfe1ebe7b382dfe3e7ca84ea4f7d7f9145a3606243f0a2a2e66b65dc599b00f5de556bddc34d66c6f5", 0x39}, 0x48, r1) r3 = add_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="c28a51b34fcb954306cb328ee58e599092efc436538e64094cb77f69ae08e3bf7774d0b7b6780cef81b0ede3b6cd23f43c5fa60c3c1153f7eaf4ddb3d241c0083b589fd18aadcbb6481115abd548588f6bc8ffe41cc78fd46a617bdb4a355c1f65e858707043f1ef081b252e8d8600babd5ff1cd1c79b50b2a70095ab9723a755f61b9c9f18b4e2947f19d5fe27b0b02d7598a17c0fc203e7a4559cd8db795c901b746524a9048a689d7932f547d0578989ca9e50122", 0xb6, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000600)=""/108, 0x6c) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r0) r5 = add_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)="ed97158bc54626eb0b49f1b8b0860818", 0x10, r4) add_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="6d5ec6c6ee8d740af89cb54d76de903677b75c000d14ce5591084c0af812b387c5bdc9df627c219750e30b05763820bbc91cff5adb38b7ab1c29068a61ff7cbc8c4050346a23beb35b9924d18c060fba2b9838f2f87cc47185d2b4126bf24dc5487898000bb97d717191065fb72d94fe8ce153b9926e8e459cd4e40c181ba30fcba69c6077b91fabcaf4512689f72cfdf574cc771ec5", 0x96, r2) keyctl$describe(0x6, r0, &(0x7f0000000900), 0x0) r6 = request_key(&(0x7f0000000940)='encrypted\x00', &(0x7f0000000980)={'syz', 0x1}, &(0x7f00000009c0)='}\x00', r2) keyctl$read(0xb, r6, &(0x7f0000000a00)=""/40, 0x28) request_key(&(0x7f0000000a40)='dns_resolver\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)='pkcs1', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000b00)='blacklist\x00', &(0x7f0000000b40)=@chain={'key_or_keyring:', r3}) r7 = add_key(&(0x7f0000000c40)='big_key\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)="968870f5abe4e13d9051833c6e0d59a91dac0219ccd3d7382aee60f24815446e1fbaae58fef83e188176a2dc94b59c0e09acabfde60f575ed8a8", 0x3a, r5) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)='fscrypt:', r7) r8 = add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @desc1}, &(0x7f0000000d80)={0x0, "6df68567cba1f98f6d78cbf8ce06280b9a5189ecf69b60fcab7e546f4b19e053669ce9629bf0a8104f992ce7cba1fd833ca320ecee11bd27ee5117a747f677db", 0x26}, 0x48, r3) keyctl$link(0x8, r4, r8) keyctl$unlink(0x9, r5, r1) 07:48:27 executing program 4: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in6=@private2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast2, @in6=@dev}}, {{@in=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) r1 = socket$inet(0x2, 0x5, 0x3f) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000005080)={{{@in=@local, @in=@dev}}, {{@in6=@private0}, 0x0, @in=@private}}, &(0x7f0000005180)=0xe8) clock_gettime(0x0, &(0x7f000000ec00)={0x0, 0x0}) recvmmsg(r1, &(0x7f000000e9c0)=[{{&(0x7f0000005940)=@generic, 0x80, &(0x7f0000007c80)=[{&(0x7f00000059c0)=""/4096, 0x1000}, {&(0x7f00000069c0)=""/159, 0x9f}, {&(0x7f0000006a80)=""/191, 0xbf}, {&(0x7f0000006b40)=""/171, 0xab}, {&(0x7f0000006c00)=""/77, 0x4d}, {&(0x7f0000006c80)=""/4096, 0x1000}], 0x6, &(0x7f0000007d00)=""/58, 0x3a}, 0x10000}, {{0x0, 0x0, &(0x7f0000007e40)=[{&(0x7f0000007d40)=""/206, 0xce}], 0x1, &(0x7f0000007e80)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000008e80)=@caif=@dgm, 0x80, &(0x7f0000009080)=[{&(0x7f0000008f00)=""/167, 0xa7}, {&(0x7f0000008fc0)=""/6, 0x6}, {&(0x7f0000009000)=""/37, 0x25}, {&(0x7f0000009040)=""/32, 0x20}], 0x4, &(0x7f00000090c0)=""/182, 0xb6}, 0x10001}, {{&(0x7f0000009180)=@ax25={{0x3, @rose}, [@bcast, @null, @remote, @rose, @remote, @remote, @netrom, @netrom]}, 0x80, &(0x7f000000b400)=[{&(0x7f0000009200)=""/120, 0x78}, {&(0x7f0000009280)=""/4096, 0x1000}, {&(0x7f000000a280)=""/4096, 0x1000}, {&(0x7f000000b280)=""/177, 0xb1}, {&(0x7f000000b340)=""/147, 0x93}], 0x5, &(0x7f000000b480)=""/144, 0x90}, 0x601a8c1d}, {{&(0x7f000000b540)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000c700)=[{&(0x7f000000b5c0)=""/136, 0x88}, {&(0x7f000000b680)=""/4096, 0x1000}, {&(0x7f000000c680)=""/82, 0x52}], 0x3, &(0x7f000000c740)}, 0x1}, {{&(0x7f000000c780)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f000000d900)=[{&(0x7f000000c800)=""/16, 0x10}, {&(0x7f000000c840)=""/4096, 0x1000}, {&(0x7f000000d840)=""/173, 0xad}], 0x3, &(0x7f000000d940)=""/145, 0x91}, 0x7f84}, {{&(0x7f000000da00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f000000e240)=[{&(0x7f000000da80)=""/133, 0x85}, {&(0x7f000000db40)=""/185, 0xb9}, {&(0x7f000000dc00)=""/208, 0xd0}, {&(0x7f000000dd00)=""/218, 0xda}, {&(0x7f000000de00)=""/107, 0x6b}, {&(0x7f000000de80)=""/165, 0xa5}, {&(0x7f000000df40)=""/197, 0xc5}, {&(0x7f000000e040)=""/59, 0x3b}, {&(0x7f000000e080)=""/138, 0x8a}, {&(0x7f000000e140)=""/216, 0xd8}], 0xa, &(0x7f000000e300)=""/82, 0x52}, 0x6}, {{0x0, 0x0, &(0x7f000000e600)=[{&(0x7f000000e380)=""/167, 0xa7}, {&(0x7f000000e440)=""/40, 0x28}, {&(0x7f000000e480)=""/62, 0x3e}, {&(0x7f000000e4c0)=""/146, 0x92}, {&(0x7f000000e580)=""/23, 0x17}, {&(0x7f000000e5c0)}], 0x6, &(0x7f000000e680)=""/61, 0x3d}, 0x4}, {{0x0, 0x0, &(0x7f000000e880)=[{&(0x7f000000e6c0)=""/144, 0x90}, {&(0x7f000000e780)=""/220, 0xdc}], 0x2, &(0x7f000000e8c0)=""/194, 0xc2}, 0x8}], 0x9, 0x20, &(0x7f000000ec40)={r2, r3+60000000}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f000000ecc0), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f000000ed80)={&(0x7f000000ec80), 0xc, &(0x7f000000ed40)={&(0x7f000000ed00)={0x2c, r5, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000011}, 0x40040) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f000000ee80)={&(0x7f000000edc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000ee40)={&(0x7f000000ee00)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80000}, 0x8084) recvmmsg(r1, &(0x7f0000016a00)=[{{0x0, 0x0, &(0x7f0000013300)=[{&(0x7f000000eec0)=""/103, 0x67}, {&(0x7f000000ef40)=""/146, 0x92}, {&(0x7f000000f000)=""/82, 0x52}, {&(0x7f000000f080)=""/4096, 0x1000}, {&(0x7f0000010080)=""/226, 0xe2}, {&(0x7f0000010180)=""/4096, 0x1000}, {&(0x7f0000011180)=""/207, 0xcf}, {&(0x7f0000011280)=""/121, 0x79}, {&(0x7f0000011300)=""/4096, 0x1000}, {&(0x7f0000012300)=""/4096, 0x1000}], 0xa}, 0x1}, {{0x0, 0x0, &(0x7f0000013400)=[{&(0x7f00000133c0)=""/34, 0x22}], 0x1, &(0x7f0000013440)=""/223, 0xdf}, 0x80000001}, {{&(0x7f0000013540)=@caif, 0x80, &(0x7f0000014740)=[{&(0x7f00000135c0)=""/4096, 0x1000}, {&(0x7f00000145c0)=""/224, 0xe0}, {&(0x7f00000146c0)=""/96, 0x60}], 0x3}, 0x8}, {{&(0x7f0000014780)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000014900)=[{&(0x7f0000014800)=""/148, 0x94}, {&(0x7f00000148c0)=""/18, 0x12}], 0x2}, 0x9}, {{&(0x7f0000014940)=@generic, 0x80, &(0x7f0000014b80)=[{&(0x7f00000149c0)=""/227, 0xe3}, {&(0x7f0000014ac0)=""/67, 0x43}, {&(0x7f0000014b40)=""/21, 0x15}], 0x3, &(0x7f0000014bc0)=""/91, 0x5b}, 0x1}, {{&(0x7f0000014c40)=@rc, 0x80, &(0x7f0000015d80)=[{&(0x7f0000014cc0)=""/176, 0xb0}, {&(0x7f0000014d80)=""/4096, 0x1000}], 0x2, &(0x7f0000015dc0)=""/239, 0xef}, 0x2}, {{0x0, 0x0, &(0x7f0000015f40)=[{&(0x7f0000015ec0)=""/79, 0x4f}], 0x1, &(0x7f0000015f80)=""/100, 0x64}, 0x7}, {{&(0x7f0000016000)=@can={0x1d, 0x0}, 0x80, &(0x7f00000161c0)=[{&(0x7f0000016080)=""/64, 0x40}, {&(0x7f00000160c0)=""/200, 0xc8}], 0x2, &(0x7f0000016200)=""/122, 0x7a}, 0x289c3efc}, {{0x0, 0x0, &(0x7f0000016480)=[{&(0x7f0000016280)=""/74, 0x4a}, {&(0x7f0000016300)=""/186, 0xba}, {&(0x7f00000163c0)=""/133, 0x85}], 0x3, &(0x7f00000164c0)=""/240, 0xf0}, 0x1}, {{&(0x7f00000165c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000016940)=[{&(0x7f0000016640)=""/202, 0xca}, {&(0x7f0000016740)=""/216, 0xd8}, {&(0x7f0000016840)=""/106, 0x6a}, {&(0x7f00000168c0)=""/59, 0x3b}, {&(0x7f0000016900)=""/12, 0xc}], 0x5, &(0x7f00000169c0)=""/62, 0x3e}, 0xb268}], 0xa, 0x40000000, &(0x7f0000016c80)={0x0, 0x989680}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000016cc0)={0x0, 0x1, 0x6, @remote}, 0x10) socketpair(0x8, 0x0, 0xfffffb37, &(0x7f0000016d00)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept(r8, &(0x7f0000016d40)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000016dc0)=0x80) pipe2(&(0x7f0000016e00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) accept4$packet(r8, &(0x7f0000016f40)={0x11, 0x0, 0x0}, &(0x7f0000016f80)=0x14, 0x800) setsockopt$packet_add_memb(r10, 0x107, 0x1, &(0x7f0000016fc0)={r11, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000017040), r7) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000017140)={&(0x7f0000017000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000017100)={&(0x7f0000017080)={0x54, r12, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffc}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x40000) r13 = accept$packet(r4, 0x0, &(0x7f0000017180)) sendto$packet(r13, &(0x7f00000171c0)="c477ded704ab179a46832994df24e3653790410bf1052b371db023a38d9d31e8f3e3ec6c96865d33ef31e284ddb7ab380f597762e0b9dab2", 0x38, 0x100, &(0x7f0000017200)={0x11, 0xf5, r6, 0x1, 0x5, 0x6, @broadcast}, 0x14) 07:48:27 executing program 5: socket$inet(0x2, 0x0, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80c00) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x15d, 0x4b, 0x5]}, &(0x7f0000000180)=0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x6, 0x2, 0x31c, 0x0, 0x6}) r2 = socket$inet(0x2, 0x55dd671d584a7d21, 0x5) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x52, [0xfffffffffffffffe, 0x9, 0x200, 0x800, 0x0, 0xb582], 0x3, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000002c0)=""/82}, &(0x7f00000003c0)=0x78) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x0, 0x1, 0x100, 0x0, 0x200}}) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000440)=""/220, &(0x7f0000000540)=0xdc) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x0, 0x2, 0x8, 0x2, 0xfff}, 0x0, 0x1, 0xdec7}) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000640)={{0x2, 0x4e24, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x4e21, @local}, 'ip6erspan0\x00'}) connect$packet(r1, &(0x7f00000006c0)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in=@loopback, @in=@private}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000940)=0xe8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) 07:48:27 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{&(0x7f0000000140)=@caif=@dbg, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/195, 0xc3}], 0x5, &(0x7f0000000500)}, 0x9}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f0000001900)=[{&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/120, 0x78}, {&(0x7f0000001840)=""/153, 0x99}], 0x5, &(0x7f0000001980)=""/225, 0xe1}, 0x9}, {{&(0x7f0000001a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/41, 0x29}, {&(0x7f0000002b40)=""/60, 0x3c}, {&(0x7f0000002b80)=""/41, 0x29}, {&(0x7f0000002bc0)=""/93, 0x5d}, {&(0x7f0000002c40)=""/243, 0xf3}, {&(0x7f0000002d40)=""/182, 0xb6}, {&(0x7f0000002e00)=""/217, 0xd9}], 0x8, &(0x7f0000002f80)=""/102, 0x66}, 0x7}, {{&(0x7f0000003000)=@ax25={{0x3, @bcast}, [@default, @bcast, @netrom, @rose, @netrom, @netrom, @netrom, @default]}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003080)=""/241, 0xf1}, {&(0x7f0000003180)=""/217, 0xd9}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/249, 0xf9}], 0x4, &(0x7f00000043c0)=""/106, 0x6a}}, {{&(0x7f0000004440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005700)=[{&(0x7f00000044c0)=""/63, 0x3f}, {&(0x7f0000004500)=""/205, 0xcd}, {&(0x7f0000004600)=""/41, 0x29}, {&(0x7f0000004640)=""/13, 0xd}, {&(0x7f0000004680)=""/11, 0xb}, {&(0x7f00000046c0)=""/8, 0x8}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x7, &(0x7f0000005780)=""/181, 0xb5}, 0x10040000}], 0x5, 0x140, &(0x7f00000059c0)={r0, r1+60000000}) getpeername(r2, &(0x7f0000005a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000005a80)=0x80) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000005ac0)={0x21, @loopback, 0x4e20, 0x1, 'lblcr\x00', 0x20, 0xd9, 0x10}, 0x2c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000005bc0)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b40)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x20000800) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000005d00)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x48, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48801) r4 = add_key$fscrypt_v1(&(0x7f0000005d40), &(0x7f0000005d80)={'fscrypt:', @auto=[0x35, 0x32, 0x0, 0x30, 0x65, 0x61, 0x31, 0x65, 0x39, 0x38, 0x32, 0x0, 0x37, 0x35, 0x0, 0x32]}, &(0x7f0000005dc0)={0x0, "5dd90f428c419950c97b714dc3dea197a81b6f35cf8c147f2af2c8bda60a3a42d5caa2031e27baeb1e1f978538a6294b6863a818e22d71149eccb21e1bcc33f8", 0x36}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000005e40)={r4, 0x0, 0x4f}, &(0x7f0000005e80)={'enc=', 'oaep', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000005f00), &(0x7f0000005f40)=""/79) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000008a00)={&(0x7f0000008940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000089c0)={&(0x7f0000008980)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20040084) recvmmsg(r3, &(0x7f000000d180)=[{{&(0x7f0000008a40)=@pppol2tp, 0x80, &(0x7f0000008c00)=[{&(0x7f0000008ac0)=""/180, 0xb4}, {&(0x7f0000008b80)=""/45, 0x2d}, {&(0x7f0000008bc0)=""/35, 0x23}], 0x3, &(0x7f0000008c40)=""/136, 0x88}, 0x1}, {{&(0x7f0000008d00)=@un=@abs, 0x80, &(0x7f0000008dc0)=[{&(0x7f0000008d80)=""/22, 0x16}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f000000a2c0)=[{&(0x7f0000008e00)=""/12, 0xc}, {&(0x7f0000008e40)=""/206, 0xce}, {&(0x7f0000008f40)=""/73, 0x49}, {&(0x7f0000008fc0)=""/122, 0x7a}, {&(0x7f0000009040)=""/246, 0xf6}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f000000a140)=""/106, 0x6a}, {&(0x7f000000a1c0)=""/8, 0x8}, {&(0x7f000000a200)=""/92, 0x5c}, {&(0x7f000000a280)=""/63, 0x3f}], 0xa, &(0x7f000000a380)=""/60, 0x3c}, 0x3}, {{&(0x7f000000a3c0)=@phonet, 0x80, &(0x7f000000a940)=[{&(0x7f000000a440)=""/41, 0x29}, {&(0x7f000000a480)=""/21, 0x15}, {&(0x7f000000a4c0)=""/115, 0x73}, {&(0x7f000000a540)=""/211, 0xd3}, {&(0x7f000000a640)=""/107, 0x6b}, {&(0x7f000000a6c0)=""/218, 0xda}, {&(0x7f000000a7c0)=""/155, 0x9b}, {&(0x7f000000a880)=""/164, 0xa4}], 0x8, &(0x7f000000a9c0)=""/236, 0xec}, 0x92a}, {{&(0x7f000000aac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f000000ad80)=[{&(0x7f000000ab40)=""/218, 0xda}, {&(0x7f000000ac40)=""/9, 0x9}, {&(0x7f000000ac80)=""/241, 0xf1}], 0x3, &(0x7f000000adc0)=""/227, 0xe3}, 0x200}, {{&(0x7f000000aec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000d040)=[{&(0x7f000000af40)}, {&(0x7f000000af80)=""/4096, 0x1000}, {&(0x7f000000bf80)=""/9, 0x9}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/96, 0x60}], 0x5, &(0x7f000000d0c0)=""/137, 0x89}, 0xed}], 0x6, 0x10040, &(0x7f000000d300)={0x77359400}) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f000000d340)={0x89, @multicast2, 0x4e21, 0x3, 'dh\x00', 0x35, 0xc1b0, 0xe}, 0x2c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f000000d3c0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f000000d480)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000d440)={&(0x7f000000d400)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f000000d4c0)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f000000d500)={0x0, @remote, 0x4e23, 0x1, 'none\x00', 0x1, 0x3, 0x60}, 0x2c) socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, &(0x7f000000d540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000d580)=0x14, 0x800) 07:48:27 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0xda, 0x97}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000140)="6ef34fce5787166c261dca6bae51dd76352d7957f3e1642a020ffa3f8eae2c56010cdc40d3e753916239890f95a5e4294613dd4f0af75074d9ccc9db63b26c46a76c1873e4a84f4197375cd94cec40b31e8de7c035b81f0c053f3d4060392ecfa5ba48f5490c584ca6fd768bb9ad52c6b6c76982913dd06eb3ac41b4080649dcbadaec35015a6aa5fd3ab66c8551a88d178d5cb08db1992b622ac740462aa331d4845f1de3567ed142a23772680c718a6936698a195ae6451972b7638b2cb7ed4f3fe86603cb8bd189b7eeb02a493a46e88f3e14c737ac044ee1", &(0x7f0000000240)=""/151) r1 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='!\'$-!*-\x00', 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "345207ab25b48e7035dbaa3f7a71712824a7eb5d4a852dcfe1ebe7b382dfe3e7ca84ea4f7d7f9145a3606243f0a2a2e66b65dc599b00f5de556bddc34d66c6f5", 0x39}, 0x48, r1) r3 = add_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="c28a51b34fcb954306cb328ee58e599092efc436538e64094cb77f69ae08e3bf7774d0b7b6780cef81b0ede3b6cd23f43c5fa60c3c1153f7eaf4ddb3d241c0083b589fd18aadcbb6481115abd548588f6bc8ffe41cc78fd46a617bdb4a355c1f65e858707043f1ef081b252e8d8600babd5ff1cd1c79b50b2a70095ab9723a755f61b9c9f18b4e2947f19d5fe27b0b02d7598a17c0fc203e7a4559cd8db795c901b746524a9048a689d7932f547d0578989ca9e50122", 0xb6, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000600)=""/108, 0x6c) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r0) r5 = add_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)="ed97158bc54626eb0b49f1b8b0860818", 0x10, r4) add_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="6d5ec6c6ee8d740af89cb54d76de903677b75c000d14ce5591084c0af812b387c5bdc9df627c219750e30b05763820bbc91cff5adb38b7ab1c29068a61ff7cbc8c4050346a23beb35b9924d18c060fba2b9838f2f87cc47185d2b4126bf24dc5487898000bb97d717191065fb72d94fe8ce153b9926e8e459cd4e40c181ba30fcba69c6077b91fabcaf4512689f72cfdf574cc771ec5", 0x96, r2) keyctl$describe(0x6, r0, &(0x7f0000000900), 0x0) r6 = request_key(&(0x7f0000000940)='encrypted\x00', &(0x7f0000000980)={'syz', 0x1}, &(0x7f00000009c0)='}\x00', r2) keyctl$read(0xb, r6, &(0x7f0000000a00)=""/40, 0x28) request_key(&(0x7f0000000a40)='dns_resolver\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)='pkcs1', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000b00)='blacklist\x00', &(0x7f0000000b40)=@chain={'key_or_keyring:', r3}) r7 = add_key(&(0x7f0000000c40)='big_key\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)="968870f5abe4e13d9051833c6e0d59a91dac0219ccd3d7382aee60f24815446e1fbaae58fef83e188176a2dc94b59c0e09acabfde60f575ed8a8", 0x3a, r5) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)='fscrypt:', r7) r8 = add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @desc1}, &(0x7f0000000d80)={0x0, "6df68567cba1f98f6d78cbf8ce06280b9a5189ecf69b60fcab7e546f4b19e053669ce9629bf0a8104f992ce7cba1fd833ca320ecee11bd27ee5117a747f677db", 0x26}, 0x48, r3) keyctl$link(0x8, r4, r8) keyctl$unlink(0x9, r5, r1) 07:48:27 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@broadcast, @in=@dev}}, {{@in6}}}, &(0x7f0000000100)=0xe8) clock_gettime(0x0, &(0x7f0000005980)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{&(0x7f0000000140)=@caif=@dbg, 0x80, &(0x7f0000000480)=[{&(0x7f00000001c0)=""/106, 0x6a}, {&(0x7f0000000240)=""/48, 0x30}, {&(0x7f0000000280)=""/182, 0xb6}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000380)=""/195, 0xc3}], 0x5, &(0x7f0000000500)}, 0x9}, {{&(0x7f0000000540)=@nl=@unspec, 0x80, &(0x7f0000001900)=[{&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000006c0)=""/248, 0xf8}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/120, 0x78}, {&(0x7f0000001840)=""/153, 0x99}], 0x5, &(0x7f0000001980)=""/225, 0xe1}, 0x9}, {{&(0x7f0000001a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/41, 0x29}, {&(0x7f0000002b40)=""/60, 0x3c}, {&(0x7f0000002b80)=""/41, 0x29}, {&(0x7f0000002bc0)=""/93, 0x5d}, {&(0x7f0000002c40)=""/243, 0xf3}, {&(0x7f0000002d40)=""/182, 0xb6}, {&(0x7f0000002e00)=""/217, 0xd9}], 0x8, &(0x7f0000002f80)=""/102, 0x66}, 0x7}, {{&(0x7f0000003000)=@ax25={{0x3, @bcast}, [@default, @bcast, @netrom, @rose, @netrom, @netrom, @netrom, @default]}, 0x80, &(0x7f0000004380)=[{&(0x7f0000003080)=""/241, 0xf1}, {&(0x7f0000003180)=""/217, 0xd9}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/249, 0xf9}], 0x4, &(0x7f00000043c0)=""/106, 0x6a}}, {{&(0x7f0000004440)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000005700)=[{&(0x7f00000044c0)=""/63, 0x3f}, {&(0x7f0000004500)=""/205, 0xcd}, {&(0x7f0000004600)=""/41, 0x29}, {&(0x7f0000004640)=""/13, 0xd}, {&(0x7f0000004680)=""/11, 0xb}, {&(0x7f00000046c0)=""/8, 0x8}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x7, &(0x7f0000005780)=""/181, 0xb5}, 0x10040000}], 0x5, 0x140, &(0x7f00000059c0)={r0, r1+60000000}) getpeername(r2, &(0x7f0000005a00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000005a80)=0x80) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000005ac0)={0x21, @loopback, 0x4e20, 0x1, 'lblcr\x00', 0x20, 0xd9, 0x10}, 0x2c) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000005bc0)={&(0x7f0000005b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005b80)={&(0x7f0000005b40)={0x2c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48081}, 0x20000800) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000005d00)={&(0x7f0000005c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000005cc0)={&(0x7f0000005c40)={0x48, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x48801) r4 = add_key$fscrypt_v1(&(0x7f0000005d40), &(0x7f0000005d80)={'fscrypt:', @auto=[0x35, 0x32, 0x0, 0x30, 0x65, 0x61, 0x31, 0x65, 0x39, 0x38, 0x32, 0x0, 0x37, 0x35, 0x0, 0x32]}, &(0x7f0000005dc0)={0x0, "5dd90f428c419950c97b714dc3dea197a81b6f35cf8c147f2af2c8bda60a3a42d5caa2031e27baeb1e1f978538a6294b6863a818e22d71149eccb21e1bcc33f8", 0x36}, 0x48, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000005e40)={r4, 0x0, 0x4f}, &(0x7f0000005e80)={'enc=', 'oaep', ' hash=', {'ghash-ce\x00'}}, &(0x7f0000005f00), &(0x7f0000005f40)=""/79) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000008a00)={&(0x7f0000008940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000089c0)={&(0x7f0000008980)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20040084) recvmmsg(r3, &(0x7f000000d180)=[{{&(0x7f0000008a40)=@pppol2tp, 0x80, &(0x7f0000008c00)=[{&(0x7f0000008ac0)=""/180, 0xb4}, {&(0x7f0000008b80)=""/45, 0x2d}, {&(0x7f0000008bc0)=""/35, 0x23}], 0x3, &(0x7f0000008c40)=""/136, 0x88}, 0x1}, {{&(0x7f0000008d00)=@un=@abs, 0x80, &(0x7f0000008dc0)=[{&(0x7f0000008d80)=""/22, 0x16}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f000000a2c0)=[{&(0x7f0000008e00)=""/12, 0xc}, {&(0x7f0000008e40)=""/206, 0xce}, {&(0x7f0000008f40)=""/73, 0x49}, {&(0x7f0000008fc0)=""/122, 0x7a}, {&(0x7f0000009040)=""/246, 0xf6}, {&(0x7f0000009140)=""/4096, 0x1000}, {&(0x7f000000a140)=""/106, 0x6a}, {&(0x7f000000a1c0)=""/8, 0x8}, {&(0x7f000000a200)=""/92, 0x5c}, {&(0x7f000000a280)=""/63, 0x3f}], 0xa, &(0x7f000000a380)=""/60, 0x3c}, 0x3}, {{&(0x7f000000a3c0)=@phonet, 0x80, &(0x7f000000a940)=[{&(0x7f000000a440)=""/41, 0x29}, {&(0x7f000000a480)=""/21, 0x15}, {&(0x7f000000a4c0)=""/115, 0x73}, {&(0x7f000000a540)=""/211, 0xd3}, {&(0x7f000000a640)=""/107, 0x6b}, {&(0x7f000000a6c0)=""/218, 0xda}, {&(0x7f000000a7c0)=""/155, 0x9b}, {&(0x7f000000a880)=""/164, 0xa4}], 0x8, &(0x7f000000a9c0)=""/236, 0xec}, 0x92a}, {{&(0x7f000000aac0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f000000ad80)=[{&(0x7f000000ab40)=""/218, 0xda}, {&(0x7f000000ac40)=""/9, 0x9}, {&(0x7f000000ac80)=""/241, 0xf1}], 0x3, &(0x7f000000adc0)=""/227, 0xe3}, 0x200}, {{&(0x7f000000aec0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f000000d040)=[{&(0x7f000000af40)}, {&(0x7f000000af80)=""/4096, 0x1000}, {&(0x7f000000bf80)=""/9, 0x9}, {&(0x7f000000bfc0)=""/4096, 0x1000}, {&(0x7f000000cfc0)=""/96, 0x60}], 0x5, &(0x7f000000d0c0)=""/137, 0x89}, 0xed}], 0x6, 0x10040, &(0x7f000000d300)={0x77359400}) setsockopt$IP_VS_SO_SET_ZERO(r6, 0x0, 0x48f, &(0x7f000000d340)={0x89, @multicast2, 0x4e21, 0x3, 'dh\x00', 0x35, 0xc1b0, 0xe}, 0x2c) r7 = syz_genetlink_get_family_id$batadv(&(0x7f000000d3c0), r2) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f000000d480)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f000000d440)={&(0x7f000000d400)={0x1c, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f000000d4c0)) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f000000d500)={0x0, @remote, 0x4e23, 0x1, 'none\x00', 0x1, 0x3, 0x60}, 0x2c) socket$packet(0x11, 0x2, 0x300) accept4$packet(r3, &(0x7f000000d540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f000000d580)=0x14, 0x800) 07:48:27 executing program 0: keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000080)={r0, 0xda, 0x97}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'blake2s-224-generic\x00'}}, &(0x7f0000000140)="6ef34fce5787166c261dca6bae51dd76352d7957f3e1642a020ffa3f8eae2c56010cdc40d3e753916239890f95a5e4294613dd4f0af75074d9ccc9db63b26c46a76c1873e4a84f4197375cd94cec40b31e8de7c035b81f0c053f3d4060392ecfa5ba48f5490c584ca6fd768bb9ad52c6b6c76982913dd06eb3ac41b4080649dcbadaec35015a6aa5fd3ab66c8551a88d178d5cb08db1992b622ac740462aa331d4845f1de3567ed142a23772680c718a6936698a195ae6451972b7638b2cb7ed4f3fe86603cb8bd189b7eeb02a493a46e88f3e14c737ac044ee1", &(0x7f0000000240)=""/151) r1 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='!\'$-!*-\x00', 0xfffffffffffffffd) r2 = add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000380)={0x0, "345207ab25b48e7035dbaa3f7a71712824a7eb5d4a852dcfe1ebe7b382dfe3e7ca84ea4f7d7f9145a3606243f0a2a2e66b65dc599b00f5de556bddc34d66c6f5", 0x39}, 0x48, r1) r3 = add_key(&(0x7f00000004c0)='blacklist\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000540)="c28a51b34fcb954306cb328ee58e599092efc436538e64094cb77f69ae08e3bf7774d0b7b6780cef81b0ede3b6cd23f43c5fa60c3c1153f7eaf4ddb3d241c0083b589fd18aadcbb6481115abd548588f6bc8ffe41cc78fd46a617bdb4a355c1f65e858707043f1ef081b252e8d8600babd5ff1cd1c79b50b2a70095ab9723a755f61b9c9f18b4e2947f19d5fe27b0b02d7598a17c0fc203e7a4559cd8db795c901b746524a9048a689d7932f547d0578989ca9e50122", 0xb6, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000600)=""/108, 0x6c) r4 = add_key$keyring(&(0x7f0000000740), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r0) r5 = add_key(&(0x7f0000000680)='id_resolver\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)="ed97158bc54626eb0b49f1b8b0860818", 0x10, r4) add_key(&(0x7f00000007c0)='cifs.spnego\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="6d5ec6c6ee8d740af89cb54d76de903677b75c000d14ce5591084c0af812b387c5bdc9df627c219750e30b05763820bbc91cff5adb38b7ab1c29068a61ff7cbc8c4050346a23beb35b9924d18c060fba2b9838f2f87cc47185d2b4126bf24dc5487898000bb97d717191065fb72d94fe8ce153b9926e8e459cd4e40c181ba30fcba69c6077b91fabcaf4512689f72cfdf574cc771ec5", 0x96, r2) keyctl$describe(0x6, r0, &(0x7f0000000900), 0x0) r6 = request_key(&(0x7f0000000940)='encrypted\x00', &(0x7f0000000980)={'syz', 0x1}, &(0x7f00000009c0)='}\x00', r2) keyctl$read(0xb, r6, &(0x7f0000000a00)=""/40, 0x28) request_key(&(0x7f0000000a40)='dns_resolver\x00', &(0x7f0000000a80)={'syz', 0x1}, &(0x7f0000000ac0)='pkcs1', r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000b00)='blacklist\x00', &(0x7f0000000b40)=@chain={'key_or_keyring:', r3}) r7 = add_key(&(0x7f0000000c40)='big_key\x00', &(0x7f0000000c80)={'syz', 0x0}, &(0x7f0000000cc0)="968870f5abe4e13d9051833c6e0d59a91dac0219ccd3d7382aee60f24815446e1fbaae58fef83e188176a2dc94b59c0e09acabfde60f575ed8a8", 0x3a, r5) request_key(&(0x7f0000000b80)='rxrpc_s\x00', &(0x7f0000000bc0)={'syz', 0x0}, &(0x7f0000000c00)='fscrypt:', r7) r8 = add_key$fscrypt_v1(&(0x7f0000000d00), &(0x7f0000000d40)={'fscrypt:', @desc1}, &(0x7f0000000d80)={0x0, "6df68567cba1f98f6d78cbf8ce06280b9a5189ecf69b60fcab7e546f4b19e053669ce9629bf0a8104f992ce7cba1fd833ca320ecee11bd27ee5117a747f677db", 0x26}, 0x48, r3) keyctl$link(0x8, r4, r8) keyctl$unlink(0x9, r5, r1) 07:48:27 executing program 7: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = memfd_secret(0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) r1 = accept(r0, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x48}, 0x1, 0x0, 0x0, 0x200408c4}, 0x40000d0) socket$inet(0x2, 0x2, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r2, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8b}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x10000}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x24010800}, 0x20044081) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) recvmmsg(r1, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000a40)=""/6, 0x6}], 0x1, &(0x7f0000000ac0)=""/226, 0xe2}, 0x33}, {{&(0x7f0000000bc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000c40)=""/157, 0x9d}, {&(0x7f0000000d00)=""/167, 0xa7}, {&(0x7f0000000dc0)=""/208, 0xd0}], 0x3, &(0x7f0000000f00)=""/195, 0xc3}, 0x7ff}, {{&(0x7f0000001000)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001080)}], 0x1}, 0x9}, {{&(0x7f0000001100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000001280)=[{&(0x7f0000001180)=""/217, 0xd9}], 0x1, &(0x7f00000012c0)=""/168, 0xa8}, 0x1ff}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001380)=""/206, 0xce}, {&(0x7f0000001480)=""/42, 0x2a}, {&(0x7f00000014c0)=""/43, 0x2b}, {&(0x7f0000001500)=""/101, 0x65}], 0x4, &(0x7f00000015c0)=""/119, 0x77}, 0x77d}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)=""/22, 0x16}], 0x1, &(0x7f00000016c0)=""/204, 0xcc}, 0x8}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000017c0)=""/65, 0x41}, {&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/169, 0xa9}], 0x3, &(0x7f0000001a00)=""/167, 0xa7}, 0x8000}, {{&(0x7f0000001ac0)=@nfc_llcp, 0x80, &(0x7f0000001f00)=[{&(0x7f0000001b40)=""/42, 0x2a}, {&(0x7f0000001b80)=""/89, 0x59}, {&(0x7f0000001c00)=""/112, 0x70}, {&(0x7f0000001c80)=""/9, 0x9}, {&(0x7f0000001cc0)=""/67, 0x43}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/247, 0xf7}], 0x7, &(0x7f0000001f80)=""/216, 0xd8}, 0x2}], 0x8, 0x12020, 0x0) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f00000022c0)={0x44, r2, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x30}}, 0x48000) ioctl$SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000024c0)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r4) ioctl$sock_inet_SIOCGARP(r4, 0x8954, &(0x7f0000002540)={{0x2, 0x4e20, @loopback}, {0x6, @multicast}, 0x4, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'nr0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000025c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0xf692e404a851cd26}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x54, r5, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x22d}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000002780)={'raw\x00', 0x2, [{}, {}]}, 0x48) 07:48:27 executing program 6: r0 = memfd_secret(0x80000) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1ff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffb}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xb5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfff}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x30000000) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x1c, 0x0, 0x100, 0xfffffffc, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x81) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000001940)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x88, 0x0, 0x210, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x3b2e, 0x4, 0x1, 0x8f]}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x10000, 0x5, 0x3]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x48044) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x68}}, 0x20004000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x24}}, 0x4000000) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x2c}}, 0x4000) recvmsg$unix(r0, &(0x7f0000002100)={&(0x7f0000001dc0), 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e40)=""/248, 0xf8}, {&(0x7f0000001f40)=""/165, 0xa5}], 0x2, &(0x7f0000002040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}, 0x2) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002180), r1) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x58, r5, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c040}, 0x40841) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x3c, r5, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x401}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="c501895bdb52"}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r5, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40814) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002500), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000041) sendmsg$BATADV_CMD_GET_HARDIF(r6, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40400c4}, 0x4050) 07:48:27 executing program 5: socket$inet(0x2, 0x0, 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80c00) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000100)={'filter\x00', 0x0, [0x15d, 0x4b, 0x5]}, &(0x7f0000000180)=0x44) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000001c0)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x6, 0x2, 0x31c, 0x0, 0x6}) r2 = socket$inet(0x2, 0x55dd671d584a7d21, 0x5) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x4, 0x52, [0xfffffffffffffffe, 0x9, 0x200, 0x800, 0x0, 0xb582], 0x3, &(0x7f0000000280)=[{}, {}, {}], &(0x7f00000002c0)=""/82}, &(0x7f00000003c0)=0x78) r3 = socket$inet(0x2, 0x3, 0x2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x0, 0x1, 0x100, 0x0, 0x200}}) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000440)=""/220, &(0x7f0000000540)=0xdc) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000580)={{0x0, 0x2, 0x8, 0x2, 0xfff}, 0x0, 0x1, 0xdec7}) pipe2(&(0x7f0000000600)={0xffffffffffffffff}, 0x80000) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000640)={{0x2, 0x4e24, @broadcast}, {0x306, @broadcast}, 0x0, {0x2, 0x4e21, @local}, 'ip6erspan0\x00'}) connect$packet(r1, &(0x7f00000006c0)={0x11, 0x10, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in=@loopback, @in=@private}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000940)=0xe8) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000980), &(0x7f00000009c0)=0x4) 07:48:28 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fstat(r0, &(0x7f0000000040)) ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x0, [0x800, 0x29c42dc4, 0x3f]}, &(0x7f0000000140)=0x44) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f00000001c0)=0x80000000) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000240)) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10008010}, 0x80) r5 = accept(r1, &(0x7f0000006780)=@tipc, &(0x7f0000006800)=0x80) sendto$inet(r5, &(0x7f0000006840)="c218b48c7b9e7957402bafc74c745119e9ed7ac4db652043b54aebedb8b0b145d115ac634797bb0af9a46c3bf14d8c9d33b4e639599ee953f2dfb531751d6b4ff7ca3d82e261e8e7e00f150d024537a65a7ae5937847b6b94f2e15f9b6b84e069e9640945d7197", 0x67, 0x97589c35441ba65e, 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000006980)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000006940)={&(0x7f0000006900)={0x3c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000890) syz_genetlink_get_family_id$nbd(&(0x7f00000069c0), 0xffffffffffffffff) getsockopt$inet_opts(r5, 0x0, 0x9, &(0x7f0000006a00)=""/202, &(0x7f0000006b00)=0xca) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000006dc0)={0x9, "9ac7f0b6bebfb63b55e3d6bf2bc7126fe5c734c97cef42e0b9a325b462ae5593ff9229360d92e6eca6608278c0d775a9d357348ea77af33e685715383edb520a"}) VM DIAGNOSIS: 07:48:21 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88801884f8e0 RCX=0000000000000000 RDX=1ffff11003109f1c RSI=ffff88801884fc48 RDI=ffff88801884f8e0 RBP=ffff88801884f978 RSP=ffff88801884f8c8 R8 =ffffffff85edffdc R9 =ffffffff85edffe0 R10=ffffed1003109f29 R11=ffff88801884f920 R12=ffff88801884f9a8 R13=0000000000000000 R14=ffff88800fef9ac0 R15=0000000000000000 RIP=ffffffff81119f6a RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f69503a3900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f694f8b0fd0 CR3=000000000f0e6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 53a4b04f71a71fbf 000000000013e740 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 a1b025186c075cd7 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020002000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055a44e182648 CR3=000000000d428000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4152b8f200000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000