Warning: Permanently added '[localhost]:26436' (ECDSA) to the list of known hosts. 2022/10/01 08:13:00 fuzzer started 2022/10/01 08:13:00 dialing manager at localhost:35095 syzkaller login: [ 41.266700] cgroup: Unknown subsys name 'net' [ 41.369403] cgroup: Unknown subsys name 'rlimit' 2022/10/01 08:13:15 syscalls: 219 2022/10/01 08:13:15 code coverage: enabled 2022/10/01 08:13:15 comparison tracing: enabled 2022/10/01 08:13:15 extra coverage: enabled 2022/10/01 08:13:15 setuid sandbox: enabled 2022/10/01 08:13:15 namespace sandbox: enabled 2022/10/01 08:13:15 Android sandbox: enabled 2022/10/01 08:13:15 fault injection: enabled 2022/10/01 08:13:15 leak checking: enabled 2022/10/01 08:13:15 net packet injection: enabled 2022/10/01 08:13:15 net device setup: enabled 2022/10/01 08:13:15 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 08:13:15 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 08:13:15 USB emulation: enabled 2022/10/01 08:13:15 hci packet injection: enabled 2022/10/01 08:13:15 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 08:13:15 802.15.4 emulation: enabled 2022/10/01 08:13:15 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 08:13:16 starting 8 fuzzer processes 08:13:16 executing program 0: setuid(0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4048001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x408c0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x21}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c880}, 0x10) setuid(0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0x25}}, 0x14) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000400)={{0x7f, 0x8}, {0x2, 0x2}, 0x339}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x2}, @generic={0x21, "603e0f82bfece98f0a141aa69abe"}, @hci={0x1f, 0x1, 0x3}, 0x6, 0x0, 0x0, 0x0, 0x3bb, 0x0, 0x1f, 0x100000001, 0x852f}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) keyctl$chown(0x4, 0x0, r2, 0xee00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000}, 0x80) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48002) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 08:13:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r3, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xec3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:13:16 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r5) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8104502}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8051}, 0x4000800) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) 08:13:16 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d00)={@empty, @rand_addr, 0x0}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x3f, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x20, 0xfffffffc, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f80)={@multicast2, @private, 0x0}, &(0x7f0000000fc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x6, 0x4, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x3, 0x5d}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001280)={0x818, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x2, 0x70, 0x5}, {0x401, 0x3, 0x2, 0x1ff}, {0x6, 0x3f, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x3, 0x8, 0xffffff8b}, {0x101, 0x0, 0x40, 0x3}, {0x3f, 0xef, 0x3f, 0x401}, {0x2, 0x20, 0x2, 0xbd54}, {0x1, 0x6, 0x2, 0xb0}, {0x7f, 0x9, 0x33, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x818}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c40)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000001d40)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001dc0)=0x14) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/109, 0x6d}, {&(0x7f0000001f80)=""/191, 0xbf}], 0x3, &(0x7f0000002080)=""/157, 0x9d}, 0x6d66b2fe}, {{&(0x7f0000002140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003600)=[{&(0x7f00000021c0)=""/254, 0xfe}, {&(0x7f00000022c0)=""/153, 0x99}, {&(0x7f0000002380)=""/115, 0x73}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/160, 0xa0}, {&(0x7f00000034c0)=""/27, 0x1b}, {&(0x7f0000003500)=""/241, 0xf1}], 0x7, &(0x7f0000003680)=""/50, 0x32}, 0x7}], 0x2, 0x40010101, &(0x7f0000003740)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003840)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000003940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003a80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004280)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0xc008040}, 0xc, &(0x7f0000004240)={&(0x7f0000003ac0)={0x74c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x7, 0x23, 0x4}, {0x80, 0x6, 0x1f, 0x3ff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x7, 0x7, 0x8}, {0x2b9, 0x1, 0x5, 0x9}]}}}]}}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4004880}, 0x4c005) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000004300)={{0x7, 0x3}, {0x3, 0x6}, 0x40, 0x1}) 08:13:16 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/55) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x8080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x7}}, './file0\x00'}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/210) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xcf4, 0x400000) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000240)=""/82) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000300)=0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000540)=""/221) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x6, 0x3, 0x0, 0x1000, 0x0, 0x1}, 0x40) r5 = syz_open_dev$evdev(&(0x7f0000000680), 0xfa, 0xa01) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000006c0)=""/86) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x5, 0x5}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000780), 0x200, 0x111000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000000800)={'\x00', 0x8001, 0x1, 0x8000}) 08:13:16 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @can, @rc={0x1f, @any, 0x50}, @llc={0x1a, 0x335, 0x4, 0x3f, 0x1f, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x2, 0x100}) getsockname(r0, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c046}, 0x40054) socketpair(0x1, 0x4, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48894) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcfcb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000080) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0xf, 0x1, '%@!{K0:(,$\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x800) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) socketpair(0x2, 0x1, 0x8, &(0x7f0000000900)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', r6, 0x4, 0x6, 0x1f, 0x9, 0x42, @loopback, @local, 0x8, 0x1, 0x10001, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x84d0}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) 08:13:16 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x200, 0x8c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff7fff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xb30, &(0x7f0000000700)={0x0, 0x4ee2, 0x10, 0x1, 0x1d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3020}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000980), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x5) socketpair(0xf, 0xa, 0xd2, &(0x7f0000000b40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x40088c4) 08:13:16 executing program 7: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/@$]:{^.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x8004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff4d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x527}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x40000) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x100, 0xb90000]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400000}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8b2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5c7f}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5e3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff7d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd2}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xa00, 0x544, 0x95e, 0x8]}, @CTA_TIMEOUT={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$bt_sco(r0, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x12048040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4022110) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2ee}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x803d}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000c80)={{0x7, 0x81}, {0x10001, 0x9}, 0x3e, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x2f, 0xe3, 0x3, 0x101, 0x8, @empty, @mcast1, 0x10, 0x10, 0x136, 0x3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000ec0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0xff]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) [ 56.234045] audit: type=1400 audit(1664611996.381:6): avc: denied { execmem } for pid=288 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 57.524062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.554441] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.558280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.559672] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.561924] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.563344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.565374] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.567069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.568432] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.570237] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.572503] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.573916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.574995] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.576736] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.578214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.584091] Bluetooth: hci0: HCI_REQ-0x0c1a [ 57.597433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.599203] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 57.600688] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.605136] Bluetooth: hci5: HCI_REQ-0x0c1a [ 57.608821] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.610637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.612229] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.617466] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.618455] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.619661] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.620647] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.624019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.625443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.626955] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.631246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.632352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.634189] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 57.635326] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.636379] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.637440] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.640034] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.641155] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.643258] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 57.644548] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 57.646072] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.647438] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 57.648724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.650139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.656684] Bluetooth: hci6: HCI_REQ-0x0c1a [ 57.657651] Bluetooth: hci1: HCI_REQ-0x0c1a [ 57.661303] Bluetooth: hci3: HCI_REQ-0x0c1a [ 57.666737] Bluetooth: hci7: HCI_REQ-0x0c1a [ 57.679589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.682029] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.690257] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.691250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.695037] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.696023] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.703317] Bluetooth: hci2: HCI_REQ-0x0c1a [ 57.704233] Bluetooth: hci4: HCI_REQ-0x0c1a [ 59.601252] Bluetooth: hci0: command 0x0409 tx timeout [ 59.664916] Bluetooth: hci6: command 0x0409 tx timeout [ 59.666305] Bluetooth: hci5: command 0x0409 tx timeout [ 59.728943] Bluetooth: hci4: command 0x0409 tx timeout [ 59.729954] Bluetooth: hci1: command 0x0409 tx timeout [ 59.731427] Bluetooth: hci2: command 0x0409 tx timeout [ 59.732326] Bluetooth: hci7: command 0x0409 tx timeout [ 59.733250] Bluetooth: hci3: command 0x0409 tx timeout [ 61.650515] Bluetooth: hci0: command 0x041b tx timeout [ 61.713888] Bluetooth: hci5: command 0x041b tx timeout [ 61.714375] Bluetooth: hci6: command 0x041b tx timeout [ 61.777915] Bluetooth: hci3: command 0x041b tx timeout [ 61.778399] Bluetooth: hci7: command 0x041b tx timeout [ 61.778882] Bluetooth: hci2: command 0x041b tx timeout [ 61.779308] Bluetooth: hci1: command 0x041b tx timeout [ 61.779731] Bluetooth: hci4: command 0x041b tx timeout [ 63.696958] Bluetooth: hci0: command 0x040f tx timeout [ 63.760964] Bluetooth: hci6: command 0x040f tx timeout [ 63.761700] Bluetooth: hci5: command 0x040f tx timeout [ 63.824929] Bluetooth: hci4: command 0x040f tx timeout [ 63.825663] Bluetooth: hci1: command 0x040f tx timeout [ 63.827036] Bluetooth: hci2: command 0x040f tx timeout [ 63.827748] Bluetooth: hci7: command 0x040f tx timeout [ 63.828507] Bluetooth: hci3: command 0x040f tx timeout [ 65.745827] Bluetooth: hci0: command 0x0419 tx timeout [ 65.809887] Bluetooth: hci5: command 0x0419 tx timeout [ 65.810332] Bluetooth: hci6: command 0x0419 tx timeout [ 65.873973] Bluetooth: hci3: command 0x0419 tx timeout [ 65.874422] Bluetooth: hci7: command 0x0419 tx timeout [ 65.874886] Bluetooth: hci2: command 0x0419 tx timeout [ 65.875296] Bluetooth: hci1: command 0x0419 tx timeout [ 65.875702] Bluetooth: hci4: command 0x0419 tx timeout 08:14:16 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r5) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8104502}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8051}, 0x4000800) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) 08:14:16 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r3, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xec3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:14:17 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r3, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xec3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:14:17 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r5) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8104502}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8051}, 0x4000800) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) 08:14:17 executing program 1: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r3, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r6, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000500)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r8, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r9, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xec3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x50) sendmsg$NLBL_UNLABEL_C_LIST(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:14:18 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r5) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8104502}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x40, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_ALGID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8051}, 0x4000800) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) 08:14:18 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r2, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000500)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:14:18 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r5) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) [ 119.973093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.975913] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.976652] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.979806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.981454] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.982290] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.986583] Bluetooth: hci4: HCI_REQ-0x0c1a [ 122.000886] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 122.000911] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 122.002444] Bluetooth: hci4: command 0x0409 tx timeout [ 122.003683] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 122.064827] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 122.065505] Bluetooth: hci6: Opcode 0x c03 failed: -110 [ 124.048864] Bluetooth: hci4: command 0x041b tx timeout [ 124.247951] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.251415] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.254647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.259732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.263380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.266980] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.277878] Bluetooth: hci0: HCI_REQ-0x0c1a [ 124.374338] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.377300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.378649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.382189] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.384543] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.390616] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.396427] Bluetooth: hci3: HCI_REQ-0x0c1a [ 124.440982] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.447607] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.449898] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.454006] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.459087] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.461656] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 124.463196] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 124.467092] Bluetooth: hci6: HCI_REQ-0x0c1a [ 124.496157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.501428] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.513138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.517013] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.522361] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.543295] Bluetooth: hci5: HCI_REQ-0x0c1a [ 126.096937] Bluetooth: hci4: command 0x040f tx timeout [ 126.288867] Bluetooth: hci0: command 0x0409 tx timeout [ 126.417909] Bluetooth: hci3: command 0x0409 tx timeout [ 126.480867] Bluetooth: hci6: command 0x0409 tx timeout [ 126.608875] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 126.608914] Bluetooth: hci5: command 0x0409 tx timeout [ 128.145815] Bluetooth: hci4: command 0x0419 tx timeout [ 128.337917] Bluetooth: hci0: command 0x041b tx timeout [ 128.465893] Bluetooth: hci3: command 0x041b tx timeout [ 128.529930] Bluetooth: hci6: command 0x041b tx timeout [ 128.657013] Bluetooth: hci5: command 0x041b tx timeout [ 129.063617] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 129.065710] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 129.067705] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 129.071731] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 129.083323] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 129.084628] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 129.091155] Bluetooth: hci7: HCI_REQ-0x0c1a [ 130.384867] Bluetooth: hci0: command 0x040f tx timeout [ 130.512824] Bluetooth: hci3: command 0x040f tx timeout [ 130.577815] Bluetooth: hci6: command 0x040f tx timeout [ 130.705971] Bluetooth: hci5: command 0x040f tx timeout [ 131.153877] Bluetooth: hci7: command 0x0409 tx timeout [ 132.432877] Bluetooth: hci0: command 0x0419 tx timeout [ 132.561836] Bluetooth: hci3: command 0x0419 tx timeout [ 132.625843] Bluetooth: hci6: command 0x0419 tx timeout [ 132.753844] Bluetooth: hci5: command 0x0419 tx timeout [ 133.201991] Bluetooth: hci7: command 0x041b tx timeout [ 135.249818] Bluetooth: hci7: command 0x040f tx timeout [ 137.296823] Bluetooth: hci7: command 0x0419 tx timeout 08:15:15 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d00)={@empty, @rand_addr, 0x0}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x3f, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x20, 0xfffffffc, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f80)={@multicast2, @private, 0x0}, &(0x7f0000000fc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x6, 0x4, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x3, 0x5d}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001280)={0x818, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x2, 0x70, 0x5}, {0x401, 0x3, 0x2, 0x1ff}, {0x6, 0x3f, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x3, 0x8, 0xffffff8b}, {0x101, 0x0, 0x40, 0x3}, {0x3f, 0xef, 0x3f, 0x401}, {0x2, 0x20, 0x2, 0xbd54}, {0x1, 0x6, 0x2, 0xb0}, {0x7f, 0x9, 0x33, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x818}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c40)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000001d40)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001dc0)=0x14) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/109, 0x6d}, {&(0x7f0000001f80)=""/191, 0xbf}], 0x3, &(0x7f0000002080)=""/157, 0x9d}, 0x6d66b2fe}, {{&(0x7f0000002140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003600)=[{&(0x7f00000021c0)=""/254, 0xfe}, {&(0x7f00000022c0)=""/153, 0x99}, {&(0x7f0000002380)=""/115, 0x73}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/160, 0xa0}, {&(0x7f00000034c0)=""/27, 0x1b}, {&(0x7f0000003500)=""/241, 0xf1}], 0x7, &(0x7f0000003680)=""/50, 0x32}, 0x7}], 0x2, 0x40010101, &(0x7f0000003740)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003840)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000003940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003a80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004280)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0xc008040}, 0xc, &(0x7f0000004240)={&(0x7f0000003ac0)={0x74c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x7, 0x23, 0x4}, {0x80, 0x6, 0x1f, 0x3ff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x7, 0x7, 0x8}, {0x2b9, 0x1, 0x5, 0x9}]}}}]}}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4004880}, 0x4c005) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000004300)={{0x7, 0x3}, {0x3, 0x6}, 0x40, 0x1}) 08:15:15 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x200, 0x8c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff7fff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xb30, &(0x7f0000000700)={0x0, 0x4ee2, 0x10, 0x1, 0x1d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3020}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000980), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x5) socketpair(0xf, 0xa, 0xd2, &(0x7f0000000b40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x40088c4) 08:15:15 executing program 0: setuid(0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4048001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x408c0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x21}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c880}, 0x10) setuid(0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0x25}}, 0x14) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000400)={{0x7f, 0x8}, {0x2, 0x2}, 0x339}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x2}, @generic={0x21, "603e0f82bfece98f0a141aa69abe"}, @hci={0x1f, 0x1, 0x3}, 0x6, 0x0, 0x0, 0x0, 0x3bb, 0x0, 0x1f, 0x100000001, 0x852f}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) keyctl$chown(0x4, 0x0, r2, 0xee00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000}, 0x80) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48002) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 08:15:15 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) 08:15:15 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r2, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000500)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:15:15 executing program 7: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/@$]:{^.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x8004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff4d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x527}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x40000) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x100, 0xb90000]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400000}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8b2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5c7f}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5e3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff7d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd2}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xa00, 0x544, 0x95e, 0x8]}, @CTA_TIMEOUT={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$bt_sco(r0, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x12048040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4022110) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2ee}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x803d}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000c80)={{0x7, 0x81}, {0x10001, 0x9}, 0x3e, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x2f, 0xe3, 0x3, 0x101, 0x8, @empty, @mcast1, 0x10, 0x10, 0x136, 0x3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000ec0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0xff]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 08:15:15 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/55) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x8080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x7}}, './file0\x00'}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/210) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xcf4, 0x400000) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000240)=""/82) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000300)=0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000540)=""/221) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x6, 0x3, 0x0, 0x1000, 0x0, 0x1}, 0x40) r5 = syz_open_dev$evdev(&(0x7f0000000680), 0xfa, 0xa01) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000006c0)=""/86) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x5, 0x5}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000780), 0x200, 0x111000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000000800)={'\x00', 0x8001, 0x1, 0x8000}) 08:15:15 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @can, @rc={0x1f, @any, 0x50}, @llc={0x1a, 0x335, 0x4, 0x3f, 0x1f, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x2, 0x100}) getsockname(r0, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c046}, 0x40054) socketpair(0x1, 0x4, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48894) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcfcb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000080) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0xf, 0x1, '%@!{K0:(,$\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x800) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) socketpair(0x2, 0x1, 0x8, &(0x7f0000000900)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', r6, 0x4, 0x6, 0x1f, 0x9, 0x42, @loopback, @local, 0x8, 0x1, 0x10001, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x84d0}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) 08:15:16 executing program 7: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/@$]:{^.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x8004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff4d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x527}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x40000) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x100, 0xb90000]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400000}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8b2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5c7f}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5e3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff7d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd2}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xa00, 0x544, 0x95e, 0x8]}, @CTA_TIMEOUT={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$bt_sco(r0, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x12048040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4022110) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2ee}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x803d}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000c80)={{0x7, 0x81}, {0x10001, 0x9}, 0x3e, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x2f, 0xe3, 0x3, 0x101, 0x8, @empty, @mcast1, 0x10, 0x10, 0x136, 0x3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000ec0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0xff]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 08:15:16 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/55) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x8080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x7}}, './file0\x00'}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/210) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xcf4, 0x400000) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000240)=""/82) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000300)=0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000540)=""/221) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x6, 0x3, 0x0, 0x1000, 0x0, 0x1}, 0x40) r5 = syz_open_dev$evdev(&(0x7f0000000680), 0xfa, 0xa01) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000006c0)=""/86) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x5, 0x5}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000780), 0x200, 0x111000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000000800)={'\x00', 0x8001, 0x1, 0x8000}) 08:15:16 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @can, @rc={0x1f, @any, 0x50}, @llc={0x1a, 0x335, 0x4, 0x3f, 0x1f, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x2, 0x100}) getsockname(r0, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c046}, 0x40054) socketpair(0x1, 0x4, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48894) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcfcb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000080) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0xf, 0x1, '%@!{K0:(,$\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x800) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) socketpair(0x2, 0x1, 0x8, &(0x7f0000000900)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', r6, 0x4, 0x6, 0x1f, 0x9, 0x42, @loopback, @local, 0x8, 0x1, 0x10001, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x84d0}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) 08:15:16 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x200, 0x8c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff7fff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xb30, &(0x7f0000000700)={0x0, 0x4ee2, 0x10, 0x1, 0x1d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3020}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000980), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x5) socketpair(0xf, 0xa, 0xd2, &(0x7f0000000b40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x40088c4) [ 183.761070] Bluetooth: hci1: command 0x0406 tx timeout [ 183.761105] Bluetooth: hci2: command 0x0406 tx timeout [ 184.272984] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 184.274278] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.275210] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.276836] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 184.279244] Call Trace: [ 184.279679] [ 184.280131] __schedule+0x893/0x2470 [ 184.280849] ? io_schedule_timeout+0x150/0x150 [ 184.281619] ? do_raw_spin_lock+0x121/0x260 [ 184.282402] ? rwlock_bug.part.0+0x90/0x90 [ 184.283179] schedule+0xda/0x1b0 [ 184.283807] rescuer_thread+0x851/0xdb0 [ 184.284502] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.285381] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.286266] ? lockdep_hardirqs_on+0x79/0x100 [ 184.287072] ? worker_thread+0x1260/0x1260 [ 184.287830] kthread+0x2ed/0x3a0 [ 184.288441] ? kthread_complete_and_exit+0x40/0x40 [ 184.289235] ret_from_fork+0x22/0x30 [ 184.289827] [ 184.290167] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 184.291096] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.291868] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.292964] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 184.294163] Call Trace: [ 184.294533] [ 184.294904] __schedule+0x893/0x2470 [ 184.295452] ? io_schedule_timeout+0x150/0x150 [ 184.296149] ? do_raw_spin_lock+0x121/0x260 [ 184.296823] ? rwlock_bug.part.0+0x90/0x90 [ 184.297440] schedule+0xda/0x1b0 [ 184.297978] rescuer_thread+0x851/0xdb0 [ 184.298559] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.299289] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.300017] ? lockdep_hardirqs_on+0x79/0x100 [ 184.300657] ? worker_thread+0x1260/0x1260 [ 184.301280] kthread+0x2ed/0x3a0 [ 184.301792] ? kthread_complete_and_exit+0x40/0x40 [ 184.302463] ret_from_fork+0x22/0x30 [ 184.303044] [ 184.303370] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 184.304287] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.305026] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.306060] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 184.307191] Call Trace: [ 184.307546] [ 184.307901] __schedule+0x893/0x2470 [ 184.308460] ? io_schedule_timeout+0x150/0x150 [ 184.309134] ? do_raw_spin_lock+0x121/0x260 [ 184.309740] ? rwlock_bug.part.0+0x90/0x90 [ 184.310395] schedule+0xda/0x1b0 [ 184.310930] rescuer_thread+0x851/0xdb0 [ 184.311503] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.312249] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.313003] ? lockdep_hardirqs_on+0x79/0x100 [ 184.313650] ? worker_thread+0x1260/0x1260 [ 184.314299] kthread+0x2ed/0x3a0 [ 184.314832] ? kthread_complete_and_exit+0x40/0x40 [ 184.315522] ret_from_fork+0x22/0x30 [ 184.316120] [ 184.316479] INFO: task netns:6 blocked for more than 143 seconds. [ 184.317358] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.318128] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.319216] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 184.320404] Call Trace: [ 184.320800] [ 184.321130] __schedule+0x893/0x2470 [ 184.321678] ? io_schedule_timeout+0x150/0x150 [ 184.322364] ? do_raw_spin_lock+0x121/0x260 [ 184.323014] ? rwlock_bug.part.0+0x90/0x90 [ 184.323634] schedule+0xda/0x1b0 [ 184.324163] rescuer_thread+0x851/0xdb0 [ 184.324756] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.325512] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.326261] ? lockdep_hardirqs_on+0x79/0x100 [ 184.326949] ? worker_thread+0x1260/0x1260 [ 184.327556] kthread+0x2ed/0x3a0 [ 184.328079] ? kthread_complete_and_exit+0x40/0x40 [ 184.328836] ret_from_fork+0x22/0x30 [ 184.329399] [ 184.329738] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 184.330699] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.331472] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.332570] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 184.333782] Workqueue: 0x0 (kblockd) [ 184.334332] Call Trace: [ 184.334699] [ 184.335075] __schedule+0x893/0x2470 [ 184.335635] ? io_schedule_timeout+0x150/0x150 [ 184.336382] schedule+0xda/0x1b0 [ 184.336917] worker_thread+0x15f/0x1260 [ 184.337511] ? process_one_work+0x16a0/0x16a0 [ 184.338202] kthread+0x2ed/0x3a0 [ 184.338689] ? kthread_complete_and_exit+0x40/0x40 [ 184.339426] ret_from_fork+0x22/0x30 [ 184.340030] [ 184.340378] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 184.341340] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.342117] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.343214] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 184.344418] Call Trace: [ 184.344817] [ 184.345150] __schedule+0x893/0x2470 [ 184.345700] ? io_schedule_timeout+0x150/0x150 [ 184.346385] ? do_raw_spin_lock+0x121/0x260 [ 184.347035] ? rwlock_bug.part.0+0x90/0x90 [ 184.347655] schedule+0xda/0x1b0 [ 184.348200] rescuer_thread+0x851/0xdb0 [ 184.348836] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.349539] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.350301] ? lockdep_hardirqs_on+0x79/0x100 [ 184.350987] ? worker_thread+0x1260/0x1260 [ 184.351600] kthread+0x2ed/0x3a0 [ 184.352137] ? kthread_complete_and_exit+0x40/0x40 [ 184.352894] ret_from_fork+0x22/0x30 [ 184.353452] [ 184.353830] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 184.354818] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.355556] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.356658] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 184.357830] Call Trace: [ 184.358198] [ 184.358526] __schedule+0x893/0x2470 [ 184.359112] ? io_schedule_timeout+0x150/0x150 [ 184.359798] ? mark_held_locks+0x9e/0xe0 [ 184.360406] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.361160] schedule+0xda/0x1b0 [ 184.361660] rcu_tasks_one_gp+0x3db/0xc10 [ 184.362329] rcu_tasks_kthread+0x80/0xa0 [ 184.362951] ? rcu_tasks_postscan+0x10/0x10 [ 184.363572] kthread+0x2ed/0x3a0 [ 184.364105] ? kthread_complete_and_exit+0x40/0x40 [ 184.364853] ret_from_fork+0x22/0x30 [ 184.365410] [ 184.365751] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 184.366720] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.367491] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.368617] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 184.369842] Workqueue: 0x0 (events_highpri) [ 184.370474] Call Trace: [ 184.370882] [ 184.371216] __schedule+0x893/0x2470 [ 184.371806] ? io_schedule_timeout+0x150/0x150 [ 184.372495] schedule+0xda/0x1b0 [ 184.373035] worker_thread+0x15f/0x1260 [ 184.373633] ? process_one_work+0x16a0/0x16a0 [ 184.374314] kthread+0x2ed/0x3a0 [ 184.374843] ? kthread_complete_and_exit+0x40/0x40 [ 184.375547] ret_from_fork+0x22/0x30 [ 184.376138] [ 184.376537] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 184.377531] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.378307] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.379393] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 184.380606] Call Trace: [ 184.381014] [ 184.381348] __schedule+0x893/0x2470 [ 184.381941] ? io_schedule_timeout+0x150/0x150 [ 184.382590] ? do_raw_spin_lock+0x121/0x260 [ 184.383254] ? rwlock_bug.part.0+0x90/0x90 [ 184.383908] schedule+0xda/0x1b0 [ 184.384421] rescuer_thread+0x851/0xdb0 [ 184.385038] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.385739] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.386482] ? lockdep_hardirqs_on+0x79/0x100 [ 184.387167] ? worker_thread+0x1260/0x1260 [ 184.387807] kthread+0x2ed/0x3a0 [ 184.388317] ? kthread_complete_and_exit+0x40/0x40 [ 184.389052] ret_from_fork+0x22/0x30 [ 184.389614] [ 184.389999] INFO: task kblockd:30 blocked for more than 143 seconds. [ 184.390920] Not tainted 6.0.0-rc7-next-20220930 #1 [ 184.391648] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 184.392751] task:kblockd state:I stack:30176 pid:30 ppid:2 flags:0x00004000 [ 184.393978] Call Trace: [ 184.394344] [ 184.394674] __schedule+0x893/0x2470 [ 184.395272] ? io_schedule_timeout+0x150/0x150 [ 184.395960] ? do_raw_spin_lock+0x121/0x260 [ 184.396597] ? rwlock_bug.part.0+0x90/0x90 [ 184.397249] schedule+0xda/0x1b0 [ 184.397739] rescuer_thread+0x851/0xdb0 [ 184.398344] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.399102] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 184.399848] ? lockdep_hardirqs_on+0x79/0x100 [ 184.400498] ? worker_thread+0x1260/0x1260 [ 184.401143] kthread+0x2ed/0x3a0 [ 184.401635] ? kthread_complete_and_exit+0x40/0x40 [ 184.402372] ret_from_fork+0x22/0x30 [ 184.402961] [ 184.403383] [ 184.403383] Showing all locks held in the system: [ 184.404270] 1 lock held by rcu_tasks_kthre/11: [ 184.404929] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 184.406318] 1 lock held by khungtaskd/25: [ 184.406927] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 184.408274] 2 locks held by in:imklog/189: [ 184.408894] #0: ffff88800e085768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 184.410127] #1: ffffffff853fa968 (syslog_lock){+.+.}-{3:3}, at: try_to_wake_up+0x4f7/0x1930 [ 184.411381] [ 184.411630] ============================================= [ 184.411630] 08:15:29 executing program 7: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/@$]:{^.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x8004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff4d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x527}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x40000) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x100, 0xb90000]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400000}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8b2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5c7f}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5e3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff7d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd2}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xa00, 0x544, 0x95e, 0x8]}, @CTA_TIMEOUT={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$bt_sco(r0, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x12048040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4022110) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2ee}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x803d}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000c80)={{0x7, 0x81}, {0x10001, 0x9}, 0x3e, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x2f, 0xe3, 0x3, 0x101, 0x8, @empty, @mcast1, 0x10, 0x10, 0x136, 0x3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000ec0)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x54, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0xff]}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 08:15:29 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d00)={@empty, @rand_addr, 0x0}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x3f, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x20, 0xfffffffc, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f80)={@multicast2, @private, 0x0}, &(0x7f0000000fc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x6, 0x4, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x3, 0x5d}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001280)={0x818, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x2, 0x70, 0x5}, {0x401, 0x3, 0x2, 0x1ff}, {0x6, 0x3f, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x3, 0x8, 0xffffff8b}, {0x101, 0x0, 0x40, 0x3}, {0x3f, 0xef, 0x3f, 0x401}, {0x2, 0x20, 0x2, 0xbd54}, {0x1, 0x6, 0x2, 0xb0}, {0x7f, 0x9, 0x33, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x818}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c40)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000001d40)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001dc0)=0x14) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/109, 0x6d}, {&(0x7f0000001f80)=""/191, 0xbf}], 0x3, &(0x7f0000002080)=""/157, 0x9d}, 0x6d66b2fe}, {{&(0x7f0000002140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003600)=[{&(0x7f00000021c0)=""/254, 0xfe}, {&(0x7f00000022c0)=""/153, 0x99}, {&(0x7f0000002380)=""/115, 0x73}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/160, 0xa0}, {&(0x7f00000034c0)=""/27, 0x1b}, {&(0x7f0000003500)=""/241, 0xf1}], 0x7, &(0x7f0000003680)=""/50, 0x32}, 0x7}], 0x2, 0x40010101, &(0x7f0000003740)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003840)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000003940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003a80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004280)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0xc008040}, 0xc, &(0x7f0000004240)={&(0x7f0000003ac0)={0x74c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x7, 0x23, 0x4}, {0x80, 0x6, 0x1f, 0x3ff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x7, 0x7, 0x8}, {0x2b9, 0x1, 0x5, 0x9}]}}}]}}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4004880}, 0x4c005) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000004300)={{0x7, 0x3}, {0x3, 0x6}, 0x40, 0x1}) 08:15:29 executing program 5: r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x0, @can, @rc={0x1f, @any, 0x50}, @llc={0x1a, 0x335, 0x4, 0x3f, 0x1f, 0x3f}, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1000, 0x2, 0x100}) getsockname(r0, &(0x7f00000000c0)=@phonet, &(0x7f0000000140)=0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1, 0x4, 0x201, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c046}, 0x40054) socketpair(0x1, 0x4, 0x4, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x3, 0x8, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x3}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48894) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7fff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcfcb}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004001}, 0x20000080) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_COMPAT_NAME={0xf, 0x1, '%@!{K0:(,$\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4094}, 0x800) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, 0xa, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x10001}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) socketpair(0x2, 0x1, 0x8, &(0x7f0000000900)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'ip6tnl0\x00', r6, 0x4, 0x6, 0x1f, 0x9, 0x42, @loopback, @local, 0x8, 0x1, 0x10001, 0x5}}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r7, {0x84d0}}, './file0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) 08:15:29 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x24}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x4004000) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004800}, 0x40000000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r2, 0x200, 0x8c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x81}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff7fff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xb30, &(0x7f0000000700)={0x0, 0x4ee2, 0x10, 0x1, 0x1d}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000800)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x3020}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r5, 0x210, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) syz_genetlink_get_family_id$team(&(0x7f0000000980), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x5) socketpair(0xf, 0xa, 0xd2, &(0x7f0000000b40)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}]}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x40088c4) 08:15:30 executing program 4: ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000000)) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000040)=""/55) r0 = syz_open_dev$vcsn(&(0x7f0000000080), 0x4, 0x8080) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6, 0x7}}, './file0\x00'}) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000100)=""/210) r2 = syz_open_dev$vcsu(&(0x7f0000000200), 0xcf4, 0x400000) ioctl$EVIOCGNAME(r2, 0x80404506, &(0x7f0000000240)=""/82) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000300)=0x7) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x8c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:fixed_disk_device_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000540)=""/221) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x6, 0x3, 0x0, 0x1000, 0x0, 0x1}, 0x40) r5 = syz_open_dev$evdev(&(0x7f0000000680), 0xfa, 0xa01) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f00000006c0)=""/86) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000740)={{0x1, 0x1, 0x18, r5, {0x5, 0x5}}, './file0\x00'}) syz_open_dev$vcsn(&(0x7f0000000780), 0x200, 0x111000) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000007c0), 0x800, 0x0) ioctl$PTP_PIN_SETFUNC(r6, 0x40603d07, &(0x7f0000000800)={'\x00', 0x8001, 0x1, 0x8000}) 08:15:30 executing program 2: syslog(0x0, &(0x7f0000000000)=""/11, 0xb) syslog(0xb, &(0x7f0000000040)=""/253, 0xfd) r0 = socket$inet(0x2, 0x800, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@remote, @private=0xa010102}, 0xc) r1 = socket$inet(0x2, 0x1, 0x5) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@ipv4}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x20, 0x1, 0x7, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x7800, 0x20, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'ip6tnl0\x00', r3, 0x6, 0x7f, 0x1b, 0x8, 0x1d, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x8000, 0x10, 0x1, 0x4}}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x14}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x2a}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x80000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x3}}]}, 0x58}}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f0000000580), 0xffffffffffffffff) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/consoles\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000600)={{{@in, @in6=@mcast2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000700)=0xe8) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000740), 0x20000, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x84}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) recvmsg(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/232, 0xe8}, {&(0x7f0000000ac0)=""/36, 0x24}], 0x2, &(0x7f0000000b40)=""/81, 0x51}, 0x40000101) 08:15:30 executing program 1: openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x83, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7d, 0x9}}, './file0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c010}, 0x20000041) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000200)={@local, @loopback}, 0xc) socketpair(0x5, 0x5, 0x8, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r2, 0x0, 0x2e, &(0x7f0000000280)=0x1, 0x4) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x10}}]}, 0x30}, 0x1, 0x0, 0x0, 0x48801}, 0x20040000) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000400), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0xfffffff8]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000500)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:src_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:newrole_exec_t:s0\x00'}]}, 0x6c}}, 0x8014) 08:15:30 executing program 0: setuid(0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2a}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4048001) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x408c0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x21}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c880}, 0x10) setuid(0xffffffffffffffff) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000003c0)={@dev={0xfe, 0x80, '\x00', 0x25}}, 0x14) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000400)={{0x7f, 0x8}, {0x2, 0x2}, 0x339}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000440)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x2}, @generic={0x21, "603e0f82bfece98f0a141aa69abe"}, @hci={0x1f, 0x1, 0x3}, 0x6, 0x0, 0x0, 0x0, 0x3bb, 0x0, 0x1f, 0x100000001, 0x852f}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) keyctl$chown(0x4, 0x0, r2, 0xee00) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80000}, 0x80) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000840), 0x10000, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f00000008c0), r4) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48002) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r0, 0x400, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 08:15:30 executing program 7: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/@$]:{^.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x8004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff4d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x527}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x40000) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x100, 0xb90000]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400000}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8b2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5c7f}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5e3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff7d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd2}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xa00, 0x544, 0x95e, 0x8]}, @CTA_TIMEOUT={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$bt_sco(r0, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x12048040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4022110) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2ee}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x803d}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000c80)={{0x7, 0x81}, {0x10001, 0x9}, 0x3e, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x2f, 0xe3, 0x3, 0x101, 0x8, @empty, @mcast1, 0x10, 0x10, 0x136, 0x3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000ec0)) socket$nl_generic(0x10, 0x3, 0x10) 08:15:30 executing program 3: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000cc0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000d00)={@empty, @rand_addr, 0x0}, &(0x7f0000000d40)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e40)={'sit0\x00', &(0x7f0000000dc0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0x3, 0x3f, 0x22, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x20, 0xfffffffc, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000f80)={@multicast2, @private, 0x0}, &(0x7f0000000fc0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'sit0\x00', &(0x7f00000011c0)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0x6, 0x4, 0x42, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x40, 0x3, 0x5d}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000001b00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001280)={0x818, r0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0001}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xd2}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0x1b4, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x2, 0x70, 0x5}, {0x401, 0x3, 0x2, 0x1ff}, {0x6, 0x3f, 0x2}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}]}}, {{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x1, 0x3, 0x8, 0xffffff8b}, {0x101, 0x0, 0x40, 0x3}, {0x3f, 0xef, 0x3f, 0x401}, {0x2, 0x20, 0x2, 0xbd54}, {0x1, 0x6, 0x2, 0xb0}, {0x7f, 0x9, 0x33, 0x5}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x818}, 0x1, 0x0, 0x0, 0x1}, 0x4000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001c40)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}}}, &(0x7f0000001d40)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001dc0)=0x14) recvmmsg(r1, &(0x7f00000036c0)=[{{&(0x7f0000001e00)=@nfc, 0x80, &(0x7f0000002040)=[{&(0x7f0000001e80)=""/82, 0x52}, {&(0x7f0000001f00)=""/109, 0x6d}, {&(0x7f0000001f80)=""/191, 0xbf}], 0x3, &(0x7f0000002080)=""/157, 0x9d}, 0x6d66b2fe}, {{&(0x7f0000002140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003600)=[{&(0x7f00000021c0)=""/254, 0xfe}, {&(0x7f00000022c0)=""/153, 0x99}, {&(0x7f0000002380)=""/115, 0x73}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/160, 0xa0}, {&(0x7f00000034c0)=""/27, 0x1b}, {&(0x7f0000003500)=""/241, 0xf1}], 0x7, &(0x7f0000003680)=""/50, 0x32}, 0x7}], 0x2, 0x40010101, &(0x7f0000003740)={0x77359400}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003840)={{{@in, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@initdev}}, &(0x7f0000003940)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000003a80)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004280)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0xc008040}, 0xc, &(0x7f0000004240)={&(0x7f0000003ac0)={0x74c, r0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r9}, {0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x80, 0x7, 0x23, 0x4}, {0x80, 0x6, 0x1f, 0x3ff}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r15}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x0, 0x7, 0x7, 0x8}, {0x2b9, 0x1, 0x5, 0x9}]}}}]}}]}, 0x74c}, 0x1, 0x0, 0x0, 0x4004880}, 0x4c005) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000004300)={{0x7, 0x3}, {0x3, 0x6}, 0x40, 0x1}) 08:15:30 executing program 7: sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/@$]:{^.\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_TYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc080}, 0x8004) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000000140), 0x30000, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x3, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1ff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xffffff4d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x527}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3400}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000050}, 0x4000) r1 = syz_open_dev$vcsu(&(0x7f00000002c0), 0xee, 0x40000) ioctl$PTP_CLOCK_GETCAPS(r1, 0x80503d01, &(0x7f0000000300)) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x164, 0x3, 0x1, 0x801, 0x0, 0x0, {0xb, 0x0, 0x2}, [@CTA_PROTOINFO={0x18, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x14, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2}]}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x100, 0xb90000]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_STATUS={0x8}, @CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400000}, @CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_TSOFF={0x8}]}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8b2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5c7f}]}, @CTA_NAT_DST={0x64, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private2}, @CTA_NAT_PROTO={0x44, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5e3f}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfffffff9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff7d}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xd2}]}, @CTA_LABELS_MASK={0x14, 0x17, [0xa00, 0x544, 0x95e, 0x8]}, @CTA_TIMEOUT={0x8}]}, 0x164}, 0x1, 0x0, 0x0, 0x44010}, 0x10) bind$bt_sco(r0, &(0x7f00000006c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x12048040}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80a0}, 0x4022110) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000980)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x400}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x80000001}]}, 0x60}, 0x1, 0x0, 0x0, 0x5}, 0x20004000) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x68, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0x44, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2ee}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6b8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000c40)={{0x1, 0x1, 0x18, r2, {0x803d}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000c80)={{0x7, 0x81}, {0x10001, 0x9}, 0x3e, 0x1}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000d40)={'syztnl2\x00', &(0x7f0000000cc0)={'sit0\x00', 0x0, 0x2f, 0xe3, 0x3, 0x101, 0x8, @empty, @mcast1, 0x10, 0x10, 0x136, 0x3}}) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000d80), 0x4000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xd70}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x20000040) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000ec0)) VM DIAGNOSIS: 08:15:24 Registers: info registers vcpu 0 RAX=00000000c93b3463 RBX=00000000b9f50561 RCX=000000000000000b RDX=000000007c0ba7cc RSI=ffff88801878fb1c RDI=000000000000000d RBP=0000000000000000 RSP=ffff88801878fa98 R8 =000000000000000b R9 =000000007c0ba7cc R10=0000000000000001 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=0000000000000800 R15=ffff88801878faf8 RIP=ffffffff8217aaf0 RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f71fee5e900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f71fe24ff30 CR3=000000000f0ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 df753484ddf1d787 000000000013c368 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 bca5c112b338611c 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0020000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f988 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000030 R11=0000000000000001 R12=0000000000000030 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055ee380998d0 CR3=0000000015e6a000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 4154170400000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000