_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0xff, 0x7}) 10:46:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0x1000}, 0x20) 10:46:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:42 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2d, 0xd8, 0x1, 0x1000}, 0x20) 10:46:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0xff, 0x7}) 10:46:42 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:42 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2d, 0xd8, 0x1, 0x1000}, 0x20) 10:46:42 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:42 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, 0x0, 0x2c, 0x0, 0x1, 0x1000}, 0x20) 10:46:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, 0x0, 0x2d, 0x0, 0x0, 0x1000}, 0x20) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x30]}}, 0x0, 0x2d}, 0x20) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x1000}, 0x20) 10:46:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="182a00000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2d, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="182a00000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7}, 0x90) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x1, 0x1000}, 0x20) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="182a00000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7}, 0x90) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2c, 0x0, 0x0, 0x1000}, 0x20) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x2c}, 0x20) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="182a00000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7}, 0x90) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="182a00000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7}, 0x90) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:43 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2d, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, 0x0) 10:46:44 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0xff, 0x7}) 10:46:44 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2c, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0x0, 0x7}) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, &(0x7f0000000200)=""/216, 0x0, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000200)=""/216, 0x2d, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0x0, 0x7}) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x1000}, 0x20) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0x0, 0x7}) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x0, 0x1000}, 0x20) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0xff}) 10:46:45 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x5f]}}, 0x0, 0x2d}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0xff}) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x0, 0xff}) 10:46:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x400, 0x870bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe2c}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004815) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="182a00000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r7}, 0x90) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000ec0)={0x16, 0xff, 0x7}) 10:46:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xd, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x5, 0x1, 0xb, 0x8}, {0x5, 0x1, 0x10, 0x8}, {0x3, 0x2, 0x2, 0x8}], 0x10, 0x7fffffff}, 0x90) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x2f, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:45 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) 10:46:45 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:45 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000200)=""/216, 0x3a, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30]}}, &(0x7f0000000200)=""/216, 0x39, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) epoll_create(0x3) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@restrict, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) epoll_create(0x3) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000200)=""/216, 0x3a, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30]}}, &(0x7f0000000200)=""/216, 0x39, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) 10:46:46 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) epoll_create(0x3) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 3: socket$packet(0x11, 0x3, 0x300) epoll_create(0x3) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 3: epoll_create(0x3) 10:46:46 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:46 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0]}}, &(0x7f0000000200)=""/216, 0x36, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 3: epoll_create(0x0) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0, 0x30]}}, &(0x7f0000000200)=""/216, 0x35, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x3b, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 3: epoll_create(0x0) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000200)=""/216, 0x34, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 3: epoll_create(0x0) 10:46:47 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000000)) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}, {0x0, [0x30]}}, &(0x7f0000000200)=""/216, 0x33, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 3: epoll_create(0x0) 10:46:47 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xb, [@restrict, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f, 0x0]}}, &(0x7f0000000200)=""/216, 0x47, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}}, &(0x7f0000000200)=""/216, 0x32, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 3: epoll_create(0x0) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000200)=""/216, 0x46, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}}, 0x0, 0x32, 0x0, 0x1, 0x1000}, 0x20) 10:46:47 executing program 3: epoll_create(0x0) 10:46:47 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f, 0x30]}}, &(0x7f0000000200)=""/216, 0x45, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}}, 0x0, 0x32, 0x0, 0x0, 0x1000}, 0x20) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 1: socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) accept4$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x80000) socketpair(0x26, 0x5, 0xff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0xa20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2e0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000089}, 0x80c0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x4, 0x70bd2b, 0x25dfdbfe, {}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20004054}, 0x40000) 10:46:47 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x5f]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @const]}}, 0x0, 0x32}, 0x20) 10:46:47 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:47 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000540)) r3 = socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x26, 0x5, 0xff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0xa20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2e0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) connect$llc(r5, &(0x7f00000006c0)={0x1a, 0x324, 0x5, 0xe0, 0x6, 0x60, @multicast}, 0x10) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x70bd2a, 0x0, "cc", [""]}, 0x14}}, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x438, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x20, [0x1d, 0x2000, 0x2, 0xb4, 0x7, 0xffff, 0xff, 0x4, 0x2, 0x8, 0x1ff, 0x820, 0x40, 0x2, 0x0, 0x0, 0xa90, 0x7, 0x80000001, 0x4, 0xbd42, 0x8, 0x9, 0x6, 0x81, 0x0, 0x5, 0x9, 0x31, 0x800, 0x2, 0x3, 0x800, 0x9, 0x3, 0x1f, 0x10001, 0x9, 0x6, 0x4, 0x0, 0x28000000, 0x92, 0x5, 0x8000, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x357152d, 0x3ff, 0x81, 0x1, 0xffffffff, 0x0, 0x81, 0x6, 0x3, 0x6, 0x7, 0x7, 0x2, 0x1], [0xfffffffb, 0x5, 0x800, 0x3, 0x3, 0x1000, 0x9, 0x8001, 0x400, 0x5d, 0x81, 0x9, 0x9, 0x4, 0x3, 0x501, 0x4, 0xc00, 0x400, 0x3, 0x40, 0x1ff, 0x4, 0x2, 0x7fffffff, 0xfffff000, 0xcc2, 0x48c, 0x1, 0x6, 0x8, 0x10001, 0x1000, 0x9, 0x2, 0xfffffffd, 0x81, 0x20, 0x8, 0xbaed, 0x60, 0x0, 0xbad, 0x8, 0x1, 0x5, 0x9, 0x8001, 0x0, 0x20000000, 0x5, 0x4, 0x9, 0x4, 0x5, 0x3654, 0x80000000, 0x1, 0xa40d, 0x1, 0x8001, 0x6, 0x83e, 0x2], [0x0, 0x9, 0x1, 0x40, 0x4, 0x7, 0x100, 0x5, 0x0, 0x400, 0x8f0e, 0x8, 0x1, 0xa8e, 0x8, 0x0, 0x0, 0x0, 0x6, 0x400, 0x4, 0x5, 0x4, 0x6, 0xfff, 0x1, 0x9, 0x9, 0x6, 0x8000, 0x3, 0x4, 0x7, 0x5, 0x7f, 0xe22, 0xffff, 0x3, 0xb118736, 0x0, 0xfff, 0x607, 0x401, 0x8, 0x100, 0x400, 0x0, 0x81, 0x9, 0x1, 0x0, 0x20, 0x1, 0x3f, 0x2, 0x7f, 0x1, 0x401, 0x6fcb, 0x6, 0x29, 0x80000000, 0x1, 0xc421], [0x10000, 0x7, 0x40, 0x7, 0x16, 0x1, 0x0, 0x9, 0x5, 0x0, 0x8001, 0x5, 0x1, 0x0, 0x0, 0xb7, 0x7, 0x1, 0xff, 0x0, 0x6, 0x8, 0x3, 0x0, 0x7f, 0x200, 0x6, 0x0, 0x7, 0x1, 0xffffff11, 0x23, 0x1, 0x6, 0x2, 0x9, 0x20, 0x371, 0x6493f638, 0x7, 0x6, 0x55e2, 0x9, 0x1, 0x10001, 0x800, 0x9, 0xfffffeff, 0x5, 0x7fff, 0x7, 0x8001, 0x0, 0xfff, 0x96, 0x3, 0x80000000, 0x7, 0x6, 0xfff, 0x3, 0x80, 0x1, 0x8], 0x16, ['}^\xc0\'\xa91%/+\x00', 'S+!^!{\x00', '\x00', '\x00', '][\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x14) getsockname$packet(r0, 0x0, 0x0) 10:46:48 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x337a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x40d0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf4d64"], 0x38}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x88c0) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000540)) r3 = socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x26, 0x5, 0xff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0xa20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2e0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) connect$llc(r5, &(0x7f00000006c0)={0x1a, 0x324, 0x5, 0xe0, 0x6, 0x60, @multicast}, 0x10) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x70bd2a, 0x0, "cc", [""]}, 0x14}}, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x438, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x20, [0x1d, 0x2000, 0x2, 0xb4, 0x7, 0xffff, 0xff, 0x4, 0x2, 0x8, 0x1ff, 0x820, 0x40, 0x2, 0x0, 0x0, 0xa90, 0x7, 0x80000001, 0x4, 0xbd42, 0x8, 0x9, 0x6, 0x81, 0x0, 0x5, 0x9, 0x31, 0x800, 0x2, 0x3, 0x800, 0x9, 0x3, 0x1f, 0x10001, 0x9, 0x6, 0x4, 0x0, 0x28000000, 0x92, 0x5, 0x8000, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x357152d, 0x3ff, 0x81, 0x1, 0xffffffff, 0x0, 0x81, 0x6, 0x3, 0x6, 0x7, 0x7, 0x2, 0x1], [0xfffffffb, 0x5, 0x800, 0x3, 0x3, 0x1000, 0x9, 0x8001, 0x400, 0x5d, 0x81, 0x9, 0x9, 0x4, 0x3, 0x501, 0x4, 0xc00, 0x400, 0x3, 0x40, 0x1ff, 0x4, 0x2, 0x7fffffff, 0xfffff000, 0xcc2, 0x48c, 0x1, 0x6, 0x8, 0x10001, 0x1000, 0x9, 0x2, 0xfffffffd, 0x81, 0x20, 0x8, 0xbaed, 0x60, 0x0, 0xbad, 0x8, 0x1, 0x5, 0x9, 0x8001, 0x0, 0x20000000, 0x5, 0x4, 0x9, 0x4, 0x5, 0x3654, 0x80000000, 0x1, 0xa40d, 0x1, 0x8001, 0x6, 0x83e, 0x2], [0x0, 0x9, 0x1, 0x40, 0x4, 0x7, 0x100, 0x5, 0x0, 0x400, 0x8f0e, 0x8, 0x1, 0xa8e, 0x8, 0x0, 0x0, 0x0, 0x6, 0x400, 0x4, 0x5, 0x4, 0x6, 0xfff, 0x1, 0x9, 0x9, 0x6, 0x8000, 0x3, 0x4, 0x7, 0x5, 0x7f, 0xe22, 0xffff, 0x3, 0xb118736, 0x0, 0xfff, 0x607, 0x401, 0x8, 0x100, 0x400, 0x0, 0x81, 0x9, 0x1, 0x0, 0x20, 0x1, 0x3f, 0x2, 0x7f, 0x1, 0x401, 0x6fcb, 0x6, 0x29, 0x80000000, 0x1, 0xc421], [0x10000, 0x7, 0x40, 0x7, 0x16, 0x1, 0x0, 0x9, 0x5, 0x0, 0x8001, 0x5, 0x1, 0x0, 0x0, 0xb7, 0x7, 0x1, 0xff, 0x0, 0x6, 0x8, 0x3, 0x0, 0x7f, 0x200, 0x6, 0x0, 0x7, 0x1, 0xffffff11, 0x23, 0x1, 0x6, 0x2, 0x9, 0x20, 0x371, 0x6493f638, 0x7, 0x6, 0x55e2, 0x9, 0x1, 0x10001, 0x800, 0x9, 0xfffffeff, 0x5, 0x7fff, 0x7, 0x8001, 0x0, 0xfff, 0x96, 0x3, 0x80000000, 0x7, 0x6, 0xfff, 0x3, 0x80, 0x1, 0x8], 0x16, ['}^\xc0\'\xa91%/+\x00', 'S+!^!{\x00', '\x00', '\x00', '][\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x14) getsockname$packet(r0, 0x0, 0x0) [ 916.028143][ T28] audit: type=1107 audit(1708339608.082:158): pid=28747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ì' 10:46:48 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x337a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x40d0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf4d64"], 0x38}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x88c0) 10:46:48 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x337a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x40d0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf4d64"], 0x38}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x88c0) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000540)) r3 = socket$nl_audit(0x10, 0x3, 0x9) socketpair(0x26, 0x5, 0xff, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r6, 0xa20, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x900}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r6, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2e0}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) connect$llc(r5, &(0x7f00000006c0)={0x1a, 0x324, 0x5, 0xe0, 0x6, 0x60, @multicast}, 0x10) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x453, 0x0, 0x70bd2a, 0x0, "cc", [""]}, 0x14}}, 0x0) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x438, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x20, [0x1d, 0x2000, 0x2, 0xb4, 0x7, 0xffff, 0xff, 0x4, 0x2, 0x8, 0x1ff, 0x820, 0x40, 0x2, 0x0, 0x0, 0xa90, 0x7, 0x80000001, 0x4, 0xbd42, 0x8, 0x9, 0x6, 0x81, 0x0, 0x5, 0x9, 0x31, 0x800, 0x2, 0x3, 0x800, 0x9, 0x3, 0x1f, 0x10001, 0x9, 0x6, 0x4, 0x0, 0x28000000, 0x92, 0x5, 0x8000, 0x3, 0x8, 0x80000001, 0x6, 0x1, 0x357152d, 0x3ff, 0x81, 0x1, 0xffffffff, 0x0, 0x81, 0x6, 0x3, 0x6, 0x7, 0x7, 0x2, 0x1], [0xfffffffb, 0x5, 0x800, 0x3, 0x3, 0x1000, 0x9, 0x8001, 0x400, 0x5d, 0x81, 0x9, 0x9, 0x4, 0x3, 0x501, 0x4, 0xc00, 0x400, 0x3, 0x40, 0x1ff, 0x4, 0x2, 0x7fffffff, 0xfffff000, 0xcc2, 0x48c, 0x1, 0x6, 0x8, 0x10001, 0x1000, 0x9, 0x2, 0xfffffffd, 0x81, 0x20, 0x8, 0xbaed, 0x60, 0x0, 0xbad, 0x8, 0x1, 0x5, 0x9, 0x8001, 0x0, 0x20000000, 0x5, 0x4, 0x9, 0x4, 0x5, 0x3654, 0x80000000, 0x1, 0xa40d, 0x1, 0x8001, 0x6, 0x83e, 0x2], [0x0, 0x9, 0x1, 0x40, 0x4, 0x7, 0x100, 0x5, 0x0, 0x400, 0x8f0e, 0x8, 0x1, 0xa8e, 0x8, 0x0, 0x0, 0x0, 0x6, 0x400, 0x4, 0x5, 0x4, 0x6, 0xfff, 0x1, 0x9, 0x9, 0x6, 0x8000, 0x3, 0x4, 0x7, 0x5, 0x7f, 0xe22, 0xffff, 0x3, 0xb118736, 0x0, 0xfff, 0x607, 0x401, 0x8, 0x100, 0x400, 0x0, 0x81, 0x9, 0x1, 0x0, 0x20, 0x1, 0x3f, 0x2, 0x7f, 0x1, 0x401, 0x6fcb, 0x6, 0x29, 0x80000000, 0x1, 0xc421], [0x10000, 0x7, 0x40, 0x7, 0x16, 0x1, 0x0, 0x9, 0x5, 0x0, 0x8001, 0x5, 0x1, 0x0, 0x0, 0xb7, 0x7, 0x1, 0xff, 0x0, 0x6, 0x8, 0x3, 0x0, 0x7f, 0x200, 0x6, 0x0, 0x7, 0x1, 0xffffff11, 0x23, 0x1, 0x6, 0x2, 0x9, 0x20, 0x371, 0x6493f638, 0x7, 0x6, 0x55e2, 0x9, 0x1, 0x10001, 0x800, 0x9, 0xfffffeff, 0x5, 0x7fff, 0x7, 0x8001, 0x0, 0xfff, 0x96, 0x3, 0x80000000, 0x7, 0x6, 0xfff, 0x3, 0x80, 0x1, 0x8], 0x16, ['}^\xc0\'\xa91%/+\x00', 'S+!^!{\x00', '\x00', '\x00', '][\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x14) getsockname$packet(r0, 0x0, 0x0) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) [ 916.208589][ T28] audit: type=1107 audit(1708339608.252:159): pid=28757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ì' 10:46:48 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x337a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x40d0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf4d64"], 0x38}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x88c0) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x337a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x40d0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf4d64"], 0x38}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x88c0) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r2, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) [ 916.362945][ T28] audit: type=1107 audit(1708339608.412:160): pid=28765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ì' 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x337a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x50}}, 0x40d0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf4d64"], 0x38}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x400}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}}, 0x88c0) 10:46:48 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)) 10:46:48 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0xad, 0x0]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 3: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 10:46:48 executing program 1: prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)) 10:46:48 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 1: socketpair(0x10, 0x0, 0x204, &(0x7f0000000040)) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:48 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:48 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$khugepaged_scan(r6, &(0x7f0000001b40), 0x8) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:48 executing program 1: socketpair(0x0, 0x0, 0x204, &(0x7f0000000040)) 10:46:48 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 1: socketpair(0x0, 0x0, 0x204, &(0x7f0000000040)) 10:46:49 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 0: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getrandom(&(0x7f0000000000)=""/129, 0x81, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000840)) 10:46:49 executing program 1: socketpair(0x0, 0x0, 0x204, &(0x7f0000000040)) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x37, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 0: socket$packet(0x11, 0x1, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getrandom(&(0x7f0000000000)=""/129, 0x81, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000840)) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x38, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 1: socketpair(0x10, 0x0, 0x0, &(0x7f0000000040)) 10:46:49 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getrandom(&(0x7f0000000000)=""/129, 0x81, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000840)) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x1, 0x1000}, 0x20) 10:46:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 3: socket$packet(0x11, 0x3, 0x300) getrandom(&(0x7f0000000000)=""/129, 0x81, 0x0) 10:46:49 executing program 1: socketpair(0x10, 0x0, 0x0, 0x0) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x30, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x38, 0x0, 0x0, 0x1000}, 0x20) 10:46:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 3: getrandom(&(0x7f0000000000)=""/129, 0x81, 0x0) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 1: socketpair(0x10, 0x0, 0x0, 0x0) 10:46:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 3: getrandom(0x0, 0x0, 0x0) 10:46:49 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x38}, 0x20) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:49 executing program 3: getrandom(0x0, 0x0, 0x0) 10:46:49 executing program 1: socketpair(0x10, 0x0, 0x0, 0x0) 10:46:49 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 3: getrandom(0x0, 0x0, 0x0) 10:46:50 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:50 executing program 1: getrandom(0x0, 0x0, 0x0) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$khugepaged_scan(r7, &(0x7f0000001b40), 0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="3000ff003664970960afab48edf40d21623278bee7e707a7e8b4e5872cdcc7e331abdb291f5acf73eb0373a491f8a481842593f4c526af8a6f2e", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf250600000008000500e00000021400060062726964676530000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:50 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00^<', @ANYRES16=r1, @ANYBLOB="000228bd7000fddbdf250800000008000500ac1414bb050001000100000008000400000000001400060076657468305f766c616e0000000000000500010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1a}}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x804) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:46:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:50 executing program 1: getrandom(0x0, 0x0, 0x0) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:50 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:50 executing program 1: getrandom(0x0, 0x0, 0x0) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x30, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x40000) 10:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x3, 0x8, 0x0, r1}) r2 = getegid() r3 = getegid() setregid(r2, r3) socketpair(0xb, 0x0, 0x3, &(0x7f0000000040)) 10:46:50 executing program 2: socket$packet(0x11, 0x3, 0x300) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x1ff) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r0 = syz_io_uring_setup(0x43e18, &(0x7f0000000280)={0x0, 0x4805, 0x0, 0x1, 0x18c}, &(0x7f0000000000), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000100)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}, @ioring_restriction_register_op={0x0, 0xd}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1}, @ioring_restriction_sqe_op={0x1, 0x1}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}], 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$llc(r1, &(0x7f0000000cc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x810, r0, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0xd, &(0x7f0000000300)=""/230, &(0x7f0000000040)=0xe6) 10:46:50 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$khugepaged_scan(r7, &(0x7f0000001b40), 0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="3000ff003664970960afab48edf40d21623278bee7e707a7e8b4e5872cdcc7e331abdb291f5acf73eb0373a491f8a481842593f4c526af8a6f2e", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf250600000008000500e00000021400060062726964676530000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), r0) socketpair(0xb, 0x80000, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x40000) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x3, 0x8, 0x0, r1}) r2 = getegid() r3 = getegid() setregid(r2, r3) socketpair(0xb, 0x0, 0x3, &(0x7f0000000040)) 10:46:50 executing program 2: socketpair(0x9, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc9b3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7b3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x43, 0xd8, 0x1, 0x1000}, 0x20) 10:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x3, 0x8, 0x0, r1}) r2 = getegid() r3 = getegid() setregid(r2, r3) socketpair(0xb, 0x0, 0x3, &(0x7f0000000040)) 10:46:50 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, 0x0, 0x40000) 10:46:50 executing program 2: socketpair(0x9, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc9b3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7b3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 10:46:50 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x3, 0x8, 0x0, r1}) r2 = getegid() r3 = getegid() setregid(r2, r3) 10:46:50 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000200)=""/216, 0x44, 0xd8, 0x1, 0x1000}, 0x20) 10:46:51 executing program 2: socketpair(0x9, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xc9b3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7b3a}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x84) 10:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x3, 0x8, 0x0, r1}) r2 = getegid() setregid(r2, 0x0) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x1, 0x1000}, 0x20) 10:46:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$khugepaged_scan(r7, &(0x7f0000001b40), 0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="3000ff003664970960afab48edf40d21623278bee7e707a7e8b4e5872cdcc7e331abdb291f5acf73eb0373a491f8a481842593f4c526af8a6f2e", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf250600000008000500e00000021400060062726964676530000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), r0) socketpair(0xb, 0x80000, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:51 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000300)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[{}], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x1, 0x3, 0x8, 0x0, r1}) setregid(0x0, 0x0) 10:46:51 executing program 2: socketpair(0x9, 0x6, 0x0, &(0x7f0000000040)) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44, 0x0, 0x0, 0x1000}, 0x20) 10:46:51 executing program 2: socketpair(0x0, 0x6, 0x0, &(0x7f0000000040)) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x2, 0x7, 0x5}) setregid(0x0, 0x0) 10:46:51 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @const]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x44}, 0x20) 10:46:51 executing program 3: syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x8000) setregid(0x0, 0x0) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:51 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$khugepaged_scan(r7, &(0x7f0000001b40), 0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="3000ff003664970960afab48edf40d21623278bee7e707a7e8b4e5872cdcc7e331abdb291f5acf73eb0373a491f8a481842593f4c526af8a6f2e", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf250600000008000500e00000021400060062726964676530000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), r0) socketpair(0xb, 0x80000, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) 10:46:51 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:51 executing program 2: socketpair(0x0, 0x6, 0x0, &(0x7f0000000040)) 10:46:51 executing program 3: setregid(0x0, 0x0) 10:46:51 executing program 3: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0xe0}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x3, 0x0, 0x1871, 0x2, r1, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x48) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:51 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:46:51 executing program 2: socketpair(0x0, 0x6, 0x0, &(0x7f0000000040)) 10:46:51 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000018c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001900)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001940)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000019c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x70, r1, 0x21b660efa622edb1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c1) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001700), 0xffffffffffffffff) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$khugepaged_scan(r7, &(0x7f0000001b40), 0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000017c0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001780)={&(0x7f0000001800)=ANY=[@ANYBLOB="3000ff003664970960afab48edf40d21623278bee7e707a7e8b4e5872cdcc7e331abdb291f5acf73eb0373a491f8a481842593f4c526af8a6f2e", @ANYRES16=r6, @ANYBLOB="000427bd7000fddbdf250600000008000500e00000021400060062726964676530000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001740), r0) socketpair(0xb, 0x80000, 0x0, &(0x7f0000000000)) r8 = syz_io_uring_setup(0xcc, &(0x7f0000000040)={0x0, 0xe452, 0x2, 0x2, 0x21c}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_RING_FDS(r8, 0x15, &(0x7f0000001680)=[{0x8, 0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/118, 0x76}, {&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/241, 0xf1}, {&(0x7f0000001300)=""/147, 0x93}, {&(0x7f00000013c0)=""/103, 0x67}, {&(0x7f0000001440)=""/239, 0xef}, {&(0x7f0000001540)=""/79, 0x4f}], &(0x7f0000001640)=[0x8, 0x1, 0x6, 0x1000, 0x3, 0x5]}], 0x1) 10:46:51 executing program 1: syz_io_uring_setup(0x1b1c, &(0x7f0000000000), 0x0, &(0x7f0000000200)) 10:46:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 2: socketpair(0x9, 0x0, 0x0, &(0x7f0000000040)) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 2: socketpair(0x9, 0x0, 0x0, 0x0) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 2: socketpair(0x9, 0x0, 0x0, 0x0) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 4: io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 2: socketpair(0x9, 0x0, 0x0, 0x0) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 4: io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:52 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc476}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$AUDIT_USER(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "683b5fb098b76681b750a5bdbb3dd44de88079e1d35769dd35c76642d9fe654b39d682165a623210f7e6178d96c088237527e46e015669fa657735fa33676e9adca8a190170568564e6ac711503254d1372cbee07509030892275cd745", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0x48c0) socket$packet(0x11, 0x3, 0x300) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 4: io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc476}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$AUDIT_USER(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "683b5fb098b76681b750a5bdbb3dd44de88079e1d35769dd35c76642d9fe654b39d682165a623210f7e6178d96c088237527e46e015669fa657735fa33676e9adca8a190170568564e6ac711503254d1372cbee07509030892275cd745", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0x48c0) socket$packet(0x11, 0x3, 0x300) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc476}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$AUDIT_USER(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "683b5fb098b76681b750a5bdbb3dd44de88079e1d35769dd35c76642d9fe654b39d682165a623210f7e6178d96c088237527e46e015669fa657735fa33676e9adca8a190170568564e6ac711503254d1372cbee07509030892275cd745", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0x48c0) socket$packet(0x11, 0x3, 0x300) 10:46:52 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:52 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1, 0x0, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:52 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:52 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20000044}, 0x40000) 10:46:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 4: r0 = io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x4cbb, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}}, 0x40000) 10:46:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r1, 0x1}, 0x14}}, 0x0) 10:46:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) getuid() timerfd_settime(r7, 0x0, &(0x7f0000000cc0), 0x0) r8 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, 0x0) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)) r3 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) r7 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x87}) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:53 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 2: socket$packet(0x11, 0x3, 0x300) socket(0x2b, 0x6, 0x5) 10:46:53 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)) r3 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r2}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:53 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:53 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 2: socket(0x2b, 0x6, 0x5) 10:46:54 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r2 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r1}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 4: io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r1, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 2: socket(0x0, 0x6, 0x5) 10:46:54 executing program 4: io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 0: io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r0}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r1, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 4: io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0xd, &(0x7f00000002c0)={0x2, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r0}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 10:46:54 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r2 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r1}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 2: socket(0x0, 0x6, 0x5) 10:46:54 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa, 0x0, r0}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 10:46:54 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, 0x0, 0x0) 10:46:54 executing program 2: socket(0x0, 0x6, 0x5) 10:46:54 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 2: socket(0x2b, 0x0, 0x5) 10:46:54 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:54 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:54 executing program 2: socket(0x2b, 0x0, 0x0) 10:46:54 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r7, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x2, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}, {&(0x7f0000000180)=""/185, 0xb9}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc476}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$AUDIT_USER(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "683b5fb098b76681b750a5bdbb3dd44de88079e1d35769dd35c76642d9fe654b39d682165a623210f7e6178d96c088237527e46e015669fa657735fa33676e9adca8a190170568564e6ac711503254d1372cbee07509030892275cd745", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0x48c0) socket$packet(0x11, 0x3, 0x300) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)={0x4, 0x200, 0x0, {r5, r6/1000+60000}, {0x77359400}, {0x2, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x27, 0x2, 0x0, 0x0, "2e85daeadd78e28cb7737edd49a843ecda5b6390ae68f1468a5099d4ce9c59a120164dfbdbb77b3268a7acffe44e410b39a0da3be9abab0151146ce85bff11f4"}}, 0x80}}, 0x10040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0x0, &(0x7f0000000580)={0x0, 0x4eb2, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc476}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$AUDIT_USER(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "683b5fb098b76681b750a5bdbb3dd44de88079e1d35769dd35c76642d9fe654b39d682165a623210f7e6178d96c088237527e46e015669fa657735fa33676e9adca8a190170568564e6ac711503254d1372cbee07509030892275cd745", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0x48c0) socket$packet(0x11, 0x3, 0x300) 10:46:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0xf64, 0x0, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) clock_gettime(0x0, &(0x7f0000000380)) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/206, 0xce}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = socket(0x2b, 0x6, 0x5) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc476}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x21012000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3f7, 0x800, 0x70bd29, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80000}, 0x4000) sendmsg$AUDIT_USER(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x3ed, 0x400, 0x70bd2d, 0x25dfdbfb, "683b5fb098b76681b750a5bdbb3dd44de88079e1d35769dd35c76642d9fe654b39d682165a623210f7e6178d96c088237527e46e015669fa657735fa33676e9adca8a190170568564e6ac711503254d1372cbee07509030892275cd745", ["", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x48804}, 0x48c0) socket$packet(0x11, 0x3, 0x300) 10:46:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0xf64, 0x0, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0xf64, 0x0, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000200)=[{{0x2, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1}, {0x4}}, {{0x2, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}], 0x18) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r2, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x0, 0x1, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r1, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockname$packet(r1, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, &(0x7f0000000240), &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:55 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r1, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:55 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x0, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{0x0}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2aa}, &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) socket$nl_audit(0x10, 0x3, 0x9) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x0, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{0x0}], 0x0}, 0x20) 10:46:56 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:56 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f0000000240)=[{0x0}], &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x0, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 0: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socket$nl_audit(0x10, 0x3, 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:56 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) add_key$user(&(0x7f0000000c00), &(0x7f0000000c40)={'syz', 0x3}, &(0x7f0000000d00)="de7e2b627c47923903d194bac54f6a40f8b9b5072d7473e38da7e0b37e0eaa96378a4ec58db23490e4d5d142328cb4af6b7c13492ffadb3a2199d6375d2ff7988eced20830988d84436dcfc877ae05fad4c2c52b5994facc71424ef6d7b8bb0b185ab615b5eef599dcc6cdc516badc0595d3701a8eb86084185524e1f3803b4f7c7b7ca778", 0x85, 0xfffffffffffffff8) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) socket$can_bcm(0x1d, 0x2, 0x2) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) 10:46:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:46:56 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:46:56 executing program 4: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:56 executing program 4: r0 = io_uring_setup(0x298d, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000280)=[0x5, 0x5]}, 0x20) 10:46:56 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) 10:46:56 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:56 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) 10:46:57 executing program 4: socketpair(0x2, 0x6, 0x202, &(0x7f0000000000)) 10:46:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:46:57 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:57 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:46:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:46:57 executing program 4: socketpair(0x2, 0x6, 0x202, &(0x7f0000000000)) 10:46:57 executing program 1: syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:57 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:46:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:46:57 executing program 4: socketpair(0x2, 0x6, 0x202, &(0x7f0000000000)) 10:46:57 executing program 1: syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:46:57 executing program 2: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 10:46:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:46:57 executing program 4: socketpair(0x0, 0x6, 0x202, &(0x7f0000000000)) 10:46:57 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:57 executing program 1: syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:57 executing program 3: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:46:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:57 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 10:46:57 executing program 3: syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000bc0)={0x3, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:57 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:57 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:57 executing program 4: socketpair(0x0, 0x6, 0x202, &(0x7f0000000000)) 10:46:57 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 10:46:57 executing program 3: syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:46:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x0, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:57 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:57 executing program 3: getegid() getegid() r0 = syz_io_uring_setup(0x1de6, &(0x7f0000000140)={0x0, 0xb3f, 0x1000, 0x1, 0x1d}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) 10:46:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x0, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:57 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0) 10:46:57 executing program 4: socketpair(0x0, 0x6, 0x202, &(0x7f0000000000)) 10:46:57 executing program 2: io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0), 0x2) 10:46:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x0, 0x0, 0xfffff801, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:57 executing program 3: getrandom(&(0x7f00000000c0)=""/162, 0xa2, 0x3) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) 10:46:57 executing program 4: socketpair(0x2, 0x0, 0x202, &(0x7f0000000000)) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}, {&(0x7f0000000ac0)=""/45, 0x2d}], &(0x7f0000000b80)=[0x8], 0x7}, 0x20) 10:46:58 executing program 2: io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 10:46:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:58 executing program 3: getrandom(&(0x7f00000000c0)=""/162, 0xa2, 0x3) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) 10:46:58 executing program 2: io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x8]}, 0x20) 10:46:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:58 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x8]}, 0x20) 10:46:58 executing program 3: getrandom(&(0x7f00000000c0)=""/162, 0xa2, 0x3) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) 10:46:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)}, 0x40) 10:46:58 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 10:46:58 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x40) 10:46:58 executing program 3: getrandom(&(0x7f00000000c0)=""/162, 0xa2, 0x3) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, 0x0, &(0x7f0000000b80)=[0x8]}, 0x20) 10:46:58 executing program 3: getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) 10:46:58 executing program 2: r0 = syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}, {&(0x7f00000009c0)=""/224, 0xe0}], &(0x7f0000000b80)=[0x8], 0x6}, 0x20) 10:46:58 executing program 4: socketpair(0x2, 0x0, 0x0, &(0x7f0000000000)) 10:46:58 executing program 3: getrandom(0x0, 0x0, 0x6) 10:46:58 executing program 2: r0 = syz_io_uring_setup(0x1b1c, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}, {&(0x7f0000000940)=""/126, 0x7e}], &(0x7f0000000b80)=[0x8], 0x5}, 0x20) 10:46:58 executing program 0: getrandom(&(0x7f00000000c0)=""/162, 0xa2, 0x3) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) 10:46:58 executing program 2: r0 = syz_io_uring_setup(0x1b1c, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:58 executing program 3: getrandom(0x0, 0x0, 0x0) 10:46:58 executing program 0: getrandom(&(0x7f00000000c0)=""/162, 0xa2, 0x3) getrandom(&(0x7f0000000000)=""/35, 0x23, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}, {&(0x7f0000000840)=""/214, 0xd6}], &(0x7f0000000b80)=[0x8], 0x4}, 0x20) 10:46:58 executing program 4: socketpair(0x2, 0x0, 0x202, 0x0) 10:46:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:58 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}, {&(0x7f0000000780)=""/180, 0xb4}], &(0x7f0000000b80)=[0x8], 0x3}, 0x20) 10:46:58 executing program 3: getrandom(0x0, 0x0, 0x0) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, 0x0, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 4: socketpair(0x2, 0x0, 0x202, 0x0) 10:46:59 executing program 3: getrandom(0x0, 0x0, 0x0) 10:46:59 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000700)=""/72, 0x48}], &(0x7f0000000b80)=[0x8], 0x2}, 0x20) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 4: socketpair(0x2, 0x0, 0x202, 0x0) 10:46:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000600)=""/134, 0x86}], &(0x7f0000000b80)=[0x8], 0x1}, 0x20) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000004c0)={&(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x3, 0x2, 0x6}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x5, 0x9, 0xffffffffffffffff, 0xffffffffdb4ec2ea, 0x87b}, &(0x7f0000000040)={0x8000000000000000, 0x3ff, 0x40000000, 0x0, 0xfffffffffffffffe, 0x8001, 0x7, 0x7f}, &(0x7f0000000080)={0x8001000000000000, 0x100, 0x3, 0x3, 0xffff, 0x7, 0x4, 0x8000000000000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) clock_getres(0x2, &(0x7f0000000180)) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 3: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000b80)=[0x8]}, 0x20) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x5, 0x9, 0xffffffffffffffff, 0xffffffffdb4ec2ea, 0x87b}, &(0x7f0000000040)={0x8000000000000000, 0x3ff, 0x40000000, 0x0, 0xfffffffffffffffe, 0x8001, 0x7, 0x7f}, &(0x7f0000000080)={0x8001000000000000, 0x100, 0x3, 0x3, 0xffff, 0x7, 0x4, 0x8000000000000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) clock_getres(0x2, &(0x7f0000000180)) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000340)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 3: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:46:59 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000b80)=[0x8]}, 0x20) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x5, 0x9, 0xffffffffffffffff, 0xffffffffdb4ec2ea, 0x87b}, &(0x7f0000000040)={0x8000000000000000, 0x3ff, 0x40000000, 0x0, 0xfffffffffffffffe, 0x8001, 0x7, 0x7f}, &(0x7f0000000080)={0x8001000000000000, 0x100, 0x3, 0x3, 0xffff, 0x7, 0x4, 0x8000000000000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) clock_getres(0x2, &(0x7f0000000180)) 10:46:59 executing program 3: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000b80)=[0x8]}, 0x20) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x5, 0x9, 0xffffffffffffffff, 0xffffffffdb4ec2ea, 0x87b}, &(0x7f0000000040)={0x8000000000000000, 0x3ff, 0x40000000, 0x0, 0xfffffffffffffffe, 0x8001, 0x7, 0x7f}, &(0x7f0000000080)={0x8001000000000000, 0x100, 0x3, 0x3, 0xffff, 0x7, 0x4, 0x8000000000000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) socket$packet(0x11, 0x3, 0x300) clock_getres(0x2, &(0x7f0000000180)) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3fa0, &(0x7f0000000200)={0x0, 0x1ddd, 0x400, 0x2, 0x238}, &(0x7f0000000040), &(0x7f0000000280)) r3 = syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xafce}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x8004) r5 = io_uring_setup(0x3d77, &(0x7f0000000180)={0x0, 0x78a9, 0x0, 0x1000000, 0x76, 0x0, r3}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r5, 0x0) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:46:59 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}], &(0x7f0000000b80)=[0x8], 0x1}, 0x20) 10:46:59 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3fa0, &(0x7f0000000200)={0x0, 0x1ddd, 0x400, 0x2, 0x238}, &(0x7f0000000040), &(0x7f0000000280)) r3 = syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xafce}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x8004) r5 = io_uring_setup(0x3d77, &(0x7f0000000180)={0x0, 0x78a9, 0x0, 0x1000000, 0x76, 0x0, r3}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r5, 0x0) 10:46:59 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:46:59 executing program 4: pselect6(0x40, &(0x7f0000000000)={0x6, 0x2, 0x5, 0x9, 0xffffffffffffffff, 0xffffffffdb4ec2ea, 0x87b}, &(0x7f0000000040)={0x8000000000000000, 0x3ff, 0x40000000, 0x0, 0xfffffffffffffffe, 0x8001, 0x7, 0x7f}, &(0x7f0000000080)={0x8001000000000000, 0x100, 0x3, 0x3, 0xffff, 0x7, 0x4, 0x8000000000000001}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x7]}, 0x8}) clock_getres(0x2, &(0x7f0000000180)) 10:47:00 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:47:00 executing program 1: r0 = syz_io_uring_setup(0xf64, &(0x7f0000000580), &(0x7f0000000140), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{0x0}], 0x0, 0x1}, 0x20) 10:47:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 4: clock_getres(0x2, &(0x7f0000000180)) 10:47:00 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3fa0, &(0x7f0000000200)={0x0, 0x1ddd, 0x400, 0x2, 0x238}, &(0x7f0000000040), &(0x7f0000000280)) r3 = syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xafce}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x8004) r5 = io_uring_setup(0x3d77, &(0x7f0000000180)={0x0, 0x78a9, 0x0, 0x1000000, 0x76, 0x0, r3}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r5, 0x0) 10:47:00 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0), 0x2) 10:47:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001800)={0x4, 0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000580)=""/31, 0x1f}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000680)=""/222, 0xde}, {&(0x7f0000000780)=""/4096, 0x1000}], &(0x7f00000017c0)=[0x7fff, 0x101, 0x15]}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3fa0, &(0x7f0000000200)={0x0, 0x1ddd, 0x400, 0x2, 0x238}, &(0x7f0000000040), &(0x7f0000000280)) r3 = syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xafce}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008050}, 0x8004) r5 = io_uring_setup(0x3d77, &(0x7f0000000180)={0x0, 0x78a9, 0x0, 0x1000000, 0x76, 0x0, r3}) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x10, r5, 0x0) 10:47:00 executing program 4: clock_getres(0x0, &(0x7f0000000180)) 10:47:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000cc0), 0x0) r1 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 2: syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0), 0x2) 10:47:00 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = syz_io_uring_setup(0x3fa0, &(0x7f0000000200)={0x0, 0x1ddd, 0x400, 0x2, 0x238}, &(0x7f0000000040), &(0x7f0000000280)) syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38, 0x0, r0}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = syz_io_uring_setup(0xce6, &(0x7f0000000000)={0x0, 0x3b01, 0x80, 0x2, 0x119}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 10:47:00 executing program 4: clock_getres(0x0, &(0x7f0000000180)) 10:47:00 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 2: syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0), 0x2) 10:47:00 executing program 4: clock_getres(0x0, &(0x7f0000000180)) 10:47:00 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 1: clock_getres(0x0, &(0x7f0000000180)) 10:47:00 executing program 3: syz_io_uring_setup(0x1e64, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 4: clock_getres(0x2, 0x0) 10:47:00 executing program 2: syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000001c0), 0x2) 10:47:00 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 1: clock_getres(0x0, &(0x7f0000000180)) 10:47:00 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:00 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 1: clock_getres(0x0, &(0x7f0000000180)) 10:47:00 executing program 4: clock_getres(0x2, 0x0) 10:47:00 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 0: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:00 executing program 1: clock_getres(0x0, 0x0) 10:47:00 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:00 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:00 executing program 4: clock_getres(0x2, 0x0) 10:47:00 executing program 0: syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:01 executing program 1: clock_getres(0x0, 0x0) 10:47:01 executing program 4: clock_getres(0x2, 0x0) 10:47:01 executing program 2: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 0: syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:01 executing program 4: clock_getres(0x2, 0x0) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 1: clock_getres(0x0, 0x0) 10:47:01 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 0: syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={&(0x7f0000000040)=[0x0], &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa, 0x0, 0x1}) 10:47:01 executing program 4: clock_getres(0x2, 0x0) 10:47:01 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r14}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=@framed, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r17}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r11, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb76}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x596}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x431d}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x94dad772acccd3e7}, 0x20000014) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r15, r1, 0x3, 0x5, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x2, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x3, 0x10, 0xfffffffffffffffc}, @exit], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x88, &(0x7f00000005c0)=""/136, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x5, 0xba32, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[r9, r18, r1, r9], &(0x7f0000000ac0)=[{0x2, 0x1, 0xc, 0x2}, {0x5, 0x5, 0x0, 0xc}, {0x1, 0x1, 0x8, 0x8}, {0x4, 0x2, 0xf, 0x7}], 0x10, 0x7fffffff}, 0x90) getsockname$packet(r0, 0x0, 0x0) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 10:47:01 executing program 4: clock_getres(0x0, 0x0) 10:47:01 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x55a6, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r14}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=@framed, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r17}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r11, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb76}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x596}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x431d}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x94dad772acccd3e7}, 0x20000014) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r15, r1, 0x3, 0x5, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x2, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x3, 0x10, 0xfffffffffffffffc}, @exit], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x88, &(0x7f00000005c0)=""/136, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x5, 0xba32, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[r9, r18, r1, r9], &(0x7f0000000ac0)=[{0x2, 0x1, 0xc, 0x2}, {0x5, 0x5, 0x0, 0xc}, {0x1, 0x1, 0x8, 0x8}, {0x4, 0x2, 0xf, 0x7}], 0x10, 0x7fffffff}, 0x90) getsockname$packet(r0, 0x0, 0x0) 10:47:01 executing program 4: clock_getres(0x0, 0x0) 10:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 4: clock_getres(0x0, 0x0) 10:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) 10:47:01 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r10, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r11, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r13, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r14}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=@framed, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r17}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r11, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r14}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1d4, r3, 0x300, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x1b8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xb76}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x596}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x431d}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x94dad772acccd3e7}, 0x20000014) r18 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r15, r1, 0x3, 0x5, 0x3}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x2, &(0x7f0000000540)=@raw=[@jmp={0x5, 0x0, 0x0, 0x5, 0x3, 0x10, 0xfffffffffffffffc}, @exit], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x88, &(0x7f00000005c0)=""/136, 0x41100, 0x0, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f00000008c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x5, 0xba32, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000a80)=[r9, r18, r1, r9], &(0x7f0000000ac0)=[{0x2, 0x1, 0xc, 0x2}, {0x5, 0x5, 0x0, 0xc}, {0x1, 0x1, 0x8, 0x8}, {0x4, 0x2, 0xf, 0x7}], 0x10, 0x7fffffff}, 0x90) getsockname$packet(r0, 0x0, 0x0) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, 0x0, &(0x7f0000000140)) 10:47:01 executing program 4: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa}) 10:47:01 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, 0x0, 0x0) 10:47:01 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=@framed, &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r16}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0]}) 10:47:01 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0], 0xa}) 10:47:01 executing program 4: r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:47:01 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffff23b}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:47:01 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0]}) 10:47:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r15 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r15, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:02 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) 10:47:02 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x425e, 0x2, 0x3}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:02 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000003940), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) 10:47:02 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4002810, r6, 0x10000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780), &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000a40)=r6, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000009c0)={&(0x7f0000000380)=[r7, r8, r9, 0x0, 0x0, 0x0], 0x6, 0x0, r10, 0x1, 0x5, 0xffff9853, 0x8, {0x0, 0x4, 0x2, 0x8000, 0x9, 0x2, 0x1, 0x25d, 0x81, 0xe2, 0x0, 0x0, 0x80, 0x5, "4c2f9f85cc7ac495a196f36cffb7fa2d83abb8456d918bcabb99257e882ae7e0"}}) r11 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x551a, &(0x7f0000000100)={0x0, 0xf0d2, 0x40, 0x2, 0x30, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x30, r4, 0x10000000) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r15 = io_uring_setup(0x11d4, &(0x7f0000000040)) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r15, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r15, 0xa, 0x0, r16) syz_io_uring_submit(r12, r13, &(0x7f0000000280)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, r14, 0x0, &(0x7f0000000240)='./file0\x00', 0x1a, 0x0, 0x1, {0x0, r16}}) getsockname$packet(r11, 0x0, &(0x7f0000000840)) 10:47:02 executing program 3: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r3}, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x343199b0cf5d0310}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x704, 0xf6, 0x25dfdbfd, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000004}, 0x40051) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r4, 0x7a9, 0x0, 0x0, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x28}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x24}}, 0x4c0c0) 10:47:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket(0x1, 0xa, 0x7fff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) getsockname$packet(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x38}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket(0x1, 0xa, 0x7fff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) getsockname$packet(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) 10:47:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:02 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4002810, r6, 0x10000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780), &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000a40)=r6, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000009c0)={&(0x7f0000000380)=[r7, r8, r9, 0x0, 0x0, 0x0], 0x6, 0x0, r10, 0x1, 0x5, 0xffff9853, 0x8, {0x0, 0x4, 0x2, 0x8000, 0x9, 0x2, 0x1, 0x25d, 0x81, 0xe2, 0x0, 0x0, 0x80, 0x5, "4c2f9f85cc7ac495a196f36cffb7fa2d83abb8456d918bcabb99257e882ae7e0"}}) r11 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x551a, &(0x7f0000000100)={0x0, 0xf0d2, 0x40, 0x2, 0x30, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x30, r4, 0x10000000) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r15 = io_uring_setup(0x11d4, &(0x7f0000000040)) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r15, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r15, 0xa, 0x0, r16) syz_io_uring_submit(r12, r13, &(0x7f0000000280)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, r14, 0x0, &(0x7f0000000240)='./file0\x00', 0x1a, 0x0, 0x1, {0x0, r16}}) getsockname$packet(r11, 0x0, &(0x7f0000000840)) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, &(0x7f00000002c0), &(0x7f0000000140)) 10:47:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket(0x1, 0xa, 0x7fff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) getsockname$packet(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) 10:47:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket(0x1, 0xa, 0x7fff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) getsockname$packet(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) 10:47:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, 0x0, &(0x7f0000000140)) 10:47:02 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4002810, r6, 0x10000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={&(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x9, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000800)={&(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0], &(0x7f0000000780), &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x2, 0x0, 0x2}) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000a40)=r6, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000008c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000009c0)={&(0x7f0000000380)=[r7, r8, r9, 0x0, 0x0, 0x0], 0x6, 0x0, r10, 0x1, 0x5, 0xffff9853, 0x8, {0x0, 0x4, 0x2, 0x8000, 0x9, 0x2, 0x1, 0x25d, 0x81, 0xe2, 0x0, 0x0, 0x80, 0x5, "4c2f9f85cc7ac495a196f36cffb7fa2d83abb8456d918bcabb99257e882ae7e0"}}) r11 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x551a, &(0x7f0000000100)={0x0, 0xf0d2, 0x40, 0x2, 0x30, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x30, r4, 0x10000000) r14 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) r15 = io_uring_setup(0x11d4, &(0x7f0000000040)) r16 = io_uring_register$IORING_REGISTER_PERSONALITY(r15, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r15, 0xa, 0x0, r16) syz_io_uring_submit(r12, r13, &(0x7f0000000280)=@IORING_OP_MKDIRAT={0x25, 0x40, 0x0, r14, 0x0, &(0x7f0000000240)='./file0\x00', 0x1a, 0x0, 0x1, {0x0, r16}}) getsockname$packet(r11, 0x0, &(0x7f0000000840)) 10:47:02 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket(0x1, 0xa, 0x7fff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) getsockname$packet(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) 10:47:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, 0x0, &(0x7f0000000140)) 10:47:02 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r2 = socket(0x1, 0xa, 0x7fff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) getsockname$packet(r0, 0x0, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$cgroup_procs(r6, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, 0x0, &(0x7f0000000140)) 10:47:02 executing program 3: socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) 10:47:02 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, &(0x7f00000002c0), 0x0) 10:47:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r11, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:02 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4002810, r6, 0x10000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:02 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket(0x1, 0xa, 0x7fff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, &(0x7f00000002c0), 0x0) 10:47:03 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4002810, r6, 0x10000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:03 executing program 3: socket$packet(0x11, 0x3, 0x300) socket(0x1, 0xa, 0x7fff) 10:47:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3}, 0x48) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x381623ce9d0e6308}, &(0x7f00000002c0), 0x0) 10:47:03 executing program 3: socket(0x1, 0xa, 0x7fff) 10:47:03 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) r1 = socket(0x1, 0xa, 0x7fff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x71e2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40089) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 3: socket(0x0, 0xa, 0x7fff) 10:47:03 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r9, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 3: socket(0x0, 0xa, 0x7fff) 10:47:03 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 3: socket(0x0, 0xa, 0x7fff) 10:47:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:03 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:03 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:03 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_audit(0x10, 0x3, 0x9) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 0: socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) [ 931.951771][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.958257][ T1239] ieee802154 phy1 wpan1: encryption failed: -22 10:47:04 executing program 3: socket(0x1, 0x0, 0x7fff) 10:47:04 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:04 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) 10:47:04 executing program 0: socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 3: socket(0x1, 0x0, 0x0) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:04 executing program 0: socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 2: socket$packet(0x11, 0x3, 0x300) socket(0x1, 0xa, 0x7fff) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 3: socket(0x1, 0x0, 0x0) 10:47:04 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:04 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 3: socket(0x1, 0x0, 0x0) 10:47:04 executing program 2: socket(0x1, 0xa, 0x7fff) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:04 executing program 2: socket(0x0, 0xa, 0x7fff) 10:47:04 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 3: socket(0x1, 0x0, 0x0) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:04 executing program 2: socket(0x0, 0xa, 0x7fff) 10:47:04 executing program 3: socket(0x1, 0x0, 0x0) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) socket(0x28, 0xa, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:04 executing program 0: r0 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:04 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:04 executing program 3: socket(0x1, 0x0, 0x0) 10:47:04 executing program 2: socket(0x0, 0xa, 0x7fff) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 4: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 3: socket(0x0, 0x0, 0x0) 10:47:05 executing program 4: io_uring_setup(0x7d9b, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, 0x0, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 2: socket(0x1, 0x0, 0x7fff) 10:47:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 3: socket(0x0, 0x0, 0x0) 10:47:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 2: socket(0x1, 0x0, 0x0) 10:47:05 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 3: socket(0x0, 0x0, 0x0) 10:47:05 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 2: socket(0x1, 0x0, 0x0) 10:47:05 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 2: socket(0x1, 0x0, 0x0) 10:47:05 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 2: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:05 executing program 1: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:05 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:05 executing program 2: socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:06 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040)={0x0, 0xe7f3, 0x800, 0x1, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) socket(0x1, 0xa, 0x7fff) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:06 executing program 2: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:06 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, 0x0) 10:47:06 executing program 3: r0 = io_uring_setup(0x7d9b, &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r1 = io_uring_setup(0x7d9b, &(0x7f0000000000)={0x0, 0x9d55, 0x200, 0x3, 0xf0, 0x0, r0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000001900)=[0x0, 0x9], 0x2) r2 = syz_io_uring_setup(0x7242, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a80)=[0x7f]}, 0x20) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f00000000c0)={0xba61, 0x0, &(0x7f0000000080)=[0xffffffffffffffff, r2, r3, r4, r5]}, 0x5) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4002810, r6, 0x10000000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x4, 0x5, 0x5}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000880)={&(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480), 0x8, 0x1, 0x5}) 10:47:06 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), 0x0, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 1: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r3, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r4 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8, 0xffffffffffffffff, 0x3, 0x3}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r9, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x6c, r10, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x6c}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r12, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000dc0)={'team0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="190000000000000000000000000000009500000000000000"], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r13}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, r10, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8, 0x1, r13}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r5}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 2: socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x425e, 0x2, 0x3}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:47:06 executing program 1: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 4: r0 = socket$packet(0x11, 0xfffffffffffffffb, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r1, r1], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, r1, 0x0, 0x1}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80800) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 3: socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000100)={&(0x7f0000000000)=[0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, r1}) r2 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x425e, 0x2, 0x3}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:47:06 executing program 4: r0 = socket$packet(0x11, 0xfffffffffffffffb, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r1, r1], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, r1, 0x0, 0x1}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80800) 10:47:06 executing program 1: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:06 executing program 2: socket$packet(0x11, 0x3, 0x300) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_io_uring_setup(0x1b1c, &(0x7f0000000000)={0x0, 0x425e, 0x2, 0x3}, &(0x7f0000000080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f00000001c0)=[0x8], 0x2) 10:47:06 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 4: r0 = socket$packet(0x11, 0xfffffffffffffffb, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r1, r1], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, r1, 0x0, 0x1}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80800) 10:47:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 10:47:06 executing program 2: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x2010, 0xffffffffffffffff, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x20010, 0xffffffffffffffff, 0x10000000) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r2}}) 10:47:06 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000003c0)=0x3, 0x4) r2 = socket(0x18, 0x800, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000157}, 0x81) 10:47:06 executing program 0: syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:06 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 10:47:06 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000003c0)=0x3, 0x4) r2 = socket(0x18, 0x800, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000157}, 0x81) 10:47:06 executing program 4: r0 = socket$packet(0x11, 0xfffffffffffffffb, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r1, r1], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, r1, 0x0, 0x1}, 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 0: syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000003c0)=0x3, 0x4) r2 = socket(0x18, 0x800, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000157}, 0x81) 10:47:07 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000003c0)=0x3, 0x4) r2 = socket(0x18, 0x800, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000157}, 0x81) 10:47:07 executing program 4: r0 = socket$packet(0x11, 0xfffffffffffffffb, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[r1, r1], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x0, '\x00', r3, r1, 0x0, 0x1}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) accept4$llc(r1, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 0: syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000140)=[0x2, 0x8001], 0x2) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000003c0)=0x3, 0x4) r2 = socket(0x18, 0x800, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000157}, 0x81) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) r1 = accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) setsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000003c0)=0x3, 0x4) r2 = socket(0x18, 0x800, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) accept4$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000300)=0x10, 0x800) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:systemd_logger_exec_t:s0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x8, 0x70bd29, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000157}, 0x81) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r0], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r2, r0, 0x0, 0x1}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 2: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r0], 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000016c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x0, '\x00', r2, r0, 0x0, 0x1}, 0x48) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r0, r0], 0x2) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 2: socket$packet(0x11, 0x2, 0x300) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x7, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xaa}, [@ringbuf_query]}, &(0x7f0000000740)='syzkaller\x00', 0x2, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x1, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x0, 0x8, 0x0, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad}, 0x90) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:07 executing program 2: socket$packet(0x11, 0x2, 0x300) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = socket(0x28, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 2: socket$packet(0x11, 0x2, 0x300) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:07 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2], 0x2) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket(0x28, 0xa, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2], 0x2) 10:47:07 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:07 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:07 executing program 3: socket$packet(0x11, 0x2, 0x300) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:07 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:08 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2], 0x2) 10:47:08 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}}, 0x4000) 10:47:08 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x0, 0x8001], 0x2) 10:47:08 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={0x0}}, 0x0) 10:47:08 executing program 4: socket$packet(0x11, 0xfffffffffffffffb, 0x300) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 0: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x0, 0x8001], 0x2) 10:47:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 1: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x2], 0x2) 10:47:08 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:08 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) accept4$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 1: r0 = syz_io_uring_setup(0x6522, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 10:47:08 executing program 2: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x10f, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:08 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:08 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x2c3755122a24482a) 10:47:08 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x10, 0x80800) 10:47:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:08 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 10:47:08 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:08 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:08 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000380), 0x80800) 10:47:08 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x2c3755122a24482a) 10:47:09 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 10:47:09 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) 10:47:09 executing program 0: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x2c, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004080}, 0x2c3755122a24482a) 10:47:09 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:09 executing program 0: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x80800) 10:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 10:47:09 executing program 0: sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 10:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r0, 0x0, &(0x7f0000000380), 0x80800) 10:47:09 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:09 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 4: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x20044010) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 3: connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socketpair(0x22, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socketpair(0x22, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:09 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 3: connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:09 executing program 1: socketpair(0xb, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:09 executing program 0: socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001180)={0x780, 0x0, 0x400, 0x86c, 0x25dfdbfd, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x8, 0x5, 0x7, 0x2d}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffc01}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) socketpair(0x22, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:09 executing program 3: connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:10 executing program 4: socket$packet(0x11, 0x2, 0x300) socketpair(0x22, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 10:47:10 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:10 executing program 4: socketpair(0x22, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:10 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 10:47:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:10 executing program 4: socketpair(0x0, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:10 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, 0x0, 0x4000) 10:47:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:10 executing program 1: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:10 executing program 4: socketpair(0x0, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:10 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x24040010) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:10 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x24040010) 10:47:10 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:10 executing program 4: socketpair(0x0, 0x3, 0x7ff, &(0x7f0000000000)) 10:47:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, 0x0, 0x24040010) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:10 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 10:47:10 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) 10:47:10 executing program 4: socketpair(0x22, 0x0, 0x7ff, &(0x7f0000000000)) 10:47:10 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:10 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4000) 10:47:10 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:10 executing program 4: socketpair(0x22, 0x0, 0x0, &(0x7f0000000000)) 10:47:11 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:11 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: socketpair(0x22, 0x0, 0x0, &(0x7f0000000000)) 10:47:11 executing program 4: socketpair(0x22, 0x0, 0x0, &(0x7f0000000000)) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: socketpair(0x22, 0x0, 0x7ff, 0x0) 10:47:11 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: socketpair(0x22, 0x0, 0x7ff, 0x0) 10:47:11 executing program 4: socketpair(0x22, 0x0, 0x7ff, 0x0) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x0, 0x70bd2b, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x0, 0x0, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x0, 0x0, 0x0, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x0, 0x0, 0x0, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, 0x0, 0x0) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x24040010) 10:47:11 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) 10:47:11 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10}, 0x10}}, 0x0) 10:47:11 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:11 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x0, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:11 executing program 1: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3fb, 0x0, 0x0, 0x0, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x24040010) 10:47:11 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f00000003c0)=""/95, &(0x7f0000000180)=0x5f) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd0100000000000089b74ceb0773dc827eb600000005003000010000aca2ee4e31380632000500290000310000000000000004000000ce03000000004d60f87ac7041056"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c0) r4 = socket(0x28, 0xa, 0x6ec) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) write$khugepaged_scan(r5, &(0x7f00000004c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) accept4$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000440)="45c448cf4f0f3506cf8e1ea5c1ed4c412fb98c2b47762865a1bd062d63b38f4f85ea15c54fdec8214c5587dc183545900196adfa9bb6d69580f5e9d823941c37af363e7f308360bc76f2cab21a721db5", 0x50) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x841) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040984}, 0x880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) 10:47:12 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:12 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f00000003c0)=""/95, &(0x7f0000000180)=0x5f) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd0100000000000089b74ceb0773dc827eb600000005003000010000aca2ee4e31380632000500290000310000000000000004000000ce03000000004d60f87ac7041056"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c0) r4 = socket(0x28, 0xa, 0x6ec) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) write$khugepaged_scan(r5, &(0x7f00000004c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) accept4$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000440)="45c448cf4f0f3506cf8e1ea5c1ed4c412fb98c2b47762865a1bd062d63b38f4f85ea15c54fdec8214c5587dc183545900196adfa9bb6d69580f5e9d823941c37af363e7f308360bc76f2cab21a721db5", 0x50) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x841) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040984}, 0x880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) 10:47:12 executing program 4: socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x8010) 10:47:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$inet6_dccp_buf(r3, 0x21, 0x2, &(0x7f00000003c0)=""/95, &(0x7f0000000180)=0x5f) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd0100000000000089b74ceb0773dc827eb600000005003000010000aca2ee4e31380632000500290000310000000000000004000000ce03000000004d60f87ac7041056"], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x2404c0c0) r4 = socket(0x28, 0xa, 0x6ec) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$vga_arbiter(r5, 0x0, 0x0) write$khugepaged_scan(r5, &(0x7f00000004c0), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) accept4$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000080)=0x10, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000440)="45c448cf4f0f3506cf8e1ea5c1ed4c412fb98c2b47762865a1bd062d63b38f4f85ea15c54fdec8214c5587dc183545900196adfa9bb6d69580f5e9d823941c37af363e7f308360bc76f2cab21a721db5", 0x50) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x50, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2c}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x841) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2040984}, 0x880) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x14) 10:47:12 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 10:47:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x8010) 10:47:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) 10:47:12 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x10f, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x8010) 10:47:12 executing program 2: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, 0x0, 0x8010) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 1: socket$packet(0x11, 0x3, 0x300) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) 10:47:12 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x64}}, 0x4004094) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:12 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x8) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x0) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:12 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x64}}, 0x4004094) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x64}}, 0x4004094) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:12 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x64}}, 0x4004094) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:12 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:13 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x0, 0x70bd2a, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x0, 0x0, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x0, 0x0, 0x0, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 10:47:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x8010) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) 10:47:13 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x64}}, 0x4004094) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:13 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:13 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:13 executing program 0: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:13 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:13 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:13 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 0: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 0: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000018c0)={&(0x7f0000001840)={0x64, r5, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @remote}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x64}}, 0x4004094) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:14 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) [ 942.669523][ T5096] Bluetooth: hci4: command 0x0405 tx timeout 10:47:14 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:14 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:14 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:14 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:15 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x2) 10:47:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x2) 10:47:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x2) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:15 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, 0x0, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:16 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) connect$bt_sco(r2, &(0x7f0000001780), 0x8) [ 944.988084][ T5096] Bluetooth: hci4: command 0x0405 tx timeout 10:47:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x2) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x0) 10:47:17 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x0) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x60, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:17 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev}, 0x10) 10:47:17 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev}, 0x10) 10:47:18 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:18 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 0: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x2) 10:47:18 executing program 0: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x0) 10:47:18 executing program 1: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 0: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x0) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 1: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x14}, 0x14}}, 0x0) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 1: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:18 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:18 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:18 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) [ 947.148658][ T5096] Bluetooth: hci4: command 0x0405 tx timeout 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 4: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:19 executing program 4: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:19 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:19 executing program 4: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:19 executing program 3: connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 10:47:19 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:19 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 10:47:19 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 0: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:20 executing program 1: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:20 executing program 4: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 10:47:20 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:20 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x10) 10:47:20 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:20 executing program 4: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:21 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:21 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) [ 949.319446][ T5096] Bluetooth: hci4: command 0x0405 tx timeout 10:47:21 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:21 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:21 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:21 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:21 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:21 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:22 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:22 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:22 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:23 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) [ 951.468159][ T5096] Bluetooth: hci4: command 0x0405 tx timeout 10:47:23 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:23 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:23 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:24 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:24 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:24 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:24 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:24 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:25 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:25 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:25 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 10:47:25 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:25 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 2: r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 2: r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 0: r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 2: r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:25 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:25 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:25 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) [ 953.628236][ T5096] Bluetooth: hci4: command 0x0405 tx timeout 10:47:25 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:25 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:25 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:25 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40), 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 4: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:26 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:26 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), 0xffffffffffffffff) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000001780), 0x8) 10:47:26 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, 0x0, 0x0) 10:47:26 executing program 3: syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x0, 0x5e, 0x7f, 0x40, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x10) 10:47:26 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:26 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:26 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:26 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:26 executing program 4: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(0xffffffffffffffff, &(0x7f0000001780), 0x8) 10:47:26 executing program 1: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:26 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:26 executing program 3: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 0: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = io_uring_setup(0x41dd, &(0x7f0000000f00)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000f80), 0x2) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0xfffffffffffffffb, 0x300) socket$packet(0x11, 0x0, 0x300) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x24, r1, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9a}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001a80), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000001b80)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x7c, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:man_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd6}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x2) 10:47:26 executing program 1: socketpair(0xb, 0x0, 0x21000000, &(0x7f0000000000)) 10:47:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_open_dev$ptys(0xc, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r3, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x3274, 0x0, r1, 0xc8e, '\x00', 0x0, r2, 0x4, 0x3, 0x1}, 0x48) getsockname$packet(r0, 0x0, 0x0) 10:47:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x460041, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x4, 0x5, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x7, 0x0, r3}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000440)=""/135, &(0x7f0000000500)=0x87) write$vga_arbiter(r1, &(0x7f0000000040)=@target={'target ', {'PCI:', 'e', ':', '5', ':', '1c', '.', '18'}}, 0x15) socketpair(0x26, 0x4, 0x6, &(0x7f0000000400)) 10:47:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000840)) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0x10}}, 0x0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f40000005304000829bd7000fddbdf2500718f9f5e25cf777bd9594c61af898989e9bc7c6edb1b538d483fe42d087d64774270103766ef1d8d9e84266bd1c3ccca200a402209bcd0fa1102ca942da0982628f3683bce0dbf9f974e9aca1efb08a637a7cd3ac327ee5aad62f718e16cfa09b0550c96c811851b00b3f409e06688e97b93d8caec96dbcc8bc8a3e3ba8117a65915fa2d096282f674c263e6d9f03b60cda195de5daf1e52005434effe7cee221b5c47ba9e8e6f1aff3d664786fb28b084daeb1aa19fee5a0fccc1bd0f86795128b2d895d9c4d17fc3d35f7805607d13b17d27a00ce702c3ba0f658d687ccdd905e900"], 0xf4}, 0x1, 0x0, 0x0, 0x20000040}, 0x1) r2 = io_uring_setup(0x8, &(0x7f0000000000)={0x0, 0x87ac, 0x0, 0x1, 0x2c5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)) r3 = eventfd2(0x800, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f0000000080)=r3, 0x1) io_uring_register$IORING_UNREGISTER_FILES(r2, 0x3, 0x0, 0x0) 10:47:26 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup, 0x24, 0x0, 0x40007, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 10:47:26 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:26 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x460041, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x4, 0x5, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x7, 0x0, r3}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000440)=""/135, &(0x7f0000000500)=0x87) write$vga_arbiter(r1, &(0x7f0000000040)=@target={'target ', {'PCI:', 'e', ':', '5', ':', '1c', '.', '18'}}, 0x15) socketpair(0x26, 0x4, 0x6, &(0x7f0000000400)) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup, 0x24, 0x0, 0x40007, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 10:47:27 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, 0x0, 0x0) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:47:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x460041, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x4, 0x5, 0x6, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000380)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[{}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x8, 0x7, 0x0, r3}) getsockopt$bt_sco_SCO_CONNINFO(r2, 0x11, 0x2, &(0x7f0000000440)=""/135, &(0x7f0000000500)=0x87) write$vga_arbiter(r1, &(0x7f0000000040)=@target={'target ', {'PCI:', 'e', ':', '5', ':', '1c', '.', '18'}}, 0x15) socketpair(0x26, 0x4, 0x6, &(0x7f0000000400)) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup, 0x24, 0x0, 0x40007, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 10:47:27 executing program 3: r0 = syz_io_uring_setup(0x60ec, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/188, 0xbc}], &(0x7f0000000480)=[0x9, 0x4, 0x8, 0x7, 0x100000001, 0x9, 0x3, 0xedc, 0x8, 0x42], 0x4}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000000840)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r2, 0x4) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:47:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x460041, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) 10:47:27 executing program 3: r0 = syz_io_uring_setup(0x60ec, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/188, 0xbc}], &(0x7f0000000480)=[0x9, 0x4, 0x8, 0x7, 0x100000001, 0x9, 0x3, 0xedc, 0x8, 0x42], 0x4}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000000840)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r2, 0x4) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$packet(0x11, 0xfffffffffffffffb, 0x300) 10:47:27 executing program 3: r0 = syz_io_uring_setup(0x60ec, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x7, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/9, 0x9}, {&(0x7f0000000280)=""/248, 0xf8}, {&(0x7f0000000380)=""/188, 0xbc}], &(0x7f0000000480)=[0x9, 0x4, 0x8, 0x7, 0x100000001, 0x9, 0x3, 0xedc, 0x8, 0x42], 0x4}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(r1, 0x0, &(0x7f0000000840)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x1, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r2, 0x4) 10:47:27 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:47:27 executing program 1: socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) 10:47:27 executing program 2: ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = io_uring_setup(0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001740)={0x9, 0x0, &(0x7f0000001640)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/130, 0x82}, {&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/19, 0x13}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000540)=""/164, 0xa4}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/14, 0xe}], &(0x7f0000001700)=[0x2], 0xa}, 0x20) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7ff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x837}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x54}}, 0x20040800) socket$packet(0x11, 0x0, 0x300) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r2, &(0x7f0000001780), 0x8) 10:47:27 executing program 3: syz_io_uring_setup(0x60ec, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup, 0x0, 0x0, 0x40007, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) 10:47:27 executing program 1: syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffb, 0x100) 10:47:27 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) 10:47:27 executing program 1: syz_open_dev$dri(0x0, 0xfffffffffffffffb, 0x100) 10:47:27 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) 10:47:27 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:47:27 executing program 0: bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup, 0x0, 0x0, 0x40007, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000900), &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) [ 955.708184][ T5096] Bluetooth: hci4: command 0x0405 tx timeout [ 955.728149][ T5094] ================================================================== [ 955.736285][ T5094] BUG: KASAN: slab-use-after-free in __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 955.745647][ T5094] Write of size 2 at addr ffff88802d8e8036 by task kworker/u9:6/5094 [ 955.753746][ T5094] [ 955.756100][ T5094] CPU: 1 PID: 5094 Comm: kworker/u9:6 Not tainted 6.8.0-rc4-next-20240214-syzkaller #0 [ 955.765764][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 955.775856][ T5094] Workqueue: hci4 hci_cmd_sync_work [ 955.781175][ T5094] Call Trace: [ 955.784480][ T5094] [ 955.787420][ T5094] dump_stack_lvl+0x241/0x360 [ 955.792122][ T5094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 955.797335][ T5094] ? __pfx__printk+0x10/0x10 [ 955.801941][ T5094] ? _printk+0xd5/0x120 [ 955.806108][ T5094] ? __virt_addr_valid+0x183/0x520 [ 955.811238][ T5094] ? __virt_addr_valid+0x183/0x520 [ 955.816366][ T5094] print_report+0x169/0x550 [ 955.820909][ T5094] ? __virt_addr_valid+0x183/0x520 [ 955.826474][ T5094] ? __virt_addr_valid+0x183/0x520 [ 955.831599][ T5094] ? __virt_addr_valid+0x44e/0x520 [ 955.836728][ T5094] ? __phys_addr+0xba/0x170 [ 955.841335][ T5094] ? __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 955.847757][ T5094] kasan_report+0x143/0x180 [ 955.852273][ T5094] ? trace_contention_end+0x3c/0x100 [ 955.857656][ T5094] ? __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 955.864166][ T5094] __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 955.870428][ T5094] ? __pfx___mutex_lock+0x10/0x10 [ 955.875567][ T5094] ? __pfx___hci_acl_create_connection_sync+0x10/0x10 [ 955.882335][ T5094] ? hci_cmd_sync_work+0x2be/0x400 [ 955.887453][ T5094] ? kfree+0x14a/0x380 [ 955.891529][ T5094] ? __pfx___hci_acl_create_connection_sync+0x10/0x10 [ 955.898300][ T5094] hci_cmd_sync_work+0x22b/0x400 [ 955.903251][ T5094] ? process_scheduled_works+0x8e1/0x1730 [ 955.908979][ T5094] process_scheduled_works+0x9d7/0x1730 [ 955.914556][ T5094] ? __pfx_process_scheduled_works+0x10/0x10 [ 955.920573][ T5094] ? assign_work+0x364/0x3d0 [ 955.925172][ T5094] worker_thread+0x86d/0xd70 [ 955.929784][ T5094] ? __kthread_parkme+0x169/0x1d0 [ 955.934812][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 955.939926][ T5094] kthread+0x2f0/0x390 [ 955.944013][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 955.949151][ T5094] ? __pfx_kthread+0x10/0x10 [ 955.953762][ T5094] ret_from_fork+0x4b/0x80 [ 955.958237][ T5094] ? __pfx_kthread+0x10/0x10 [ 955.962843][ T5094] ret_from_fork_asm+0x1a/0x30 [ 955.967642][ T5094] [ 955.970675][ T5094] [ 955.972997][ T5094] Allocated by task 31367: [ 955.977406][ T5094] kasan_save_track+0x3f/0x80 [ 955.982108][ T5094] __kasan_kmalloc+0x98/0xb0 [ 955.986723][ T5094] kmalloc_trace+0x1d9/0x360 [ 955.991347][ T5094] hci_conn_add+0xc7/0x13a0 [ 955.995950][ T5094] hci_connect_acl+0x166/0x4b0 [ 956.000744][ T5094] hci_connect_sco+0x47/0x350 [ 956.005430][ T5094] sco_sock_connect+0x2fc/0x990 [ 956.010288][ T5094] __sys_connect+0x2df/0x310 [ 956.014882][ T5094] __x64_sys_connect+0x7a/0x90 [ 956.019649][ T5094] do_syscall_64+0xfb/0x240 [ 956.024161][ T5094] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 956.030060][ T5094] [ 956.032381][ T5094] Freed by task 5094: [ 956.036356][ T5094] kasan_save_track+0x3f/0x80 [ 956.041099][ T5094] kasan_save_free_info+0x40/0x50 [ 956.046131][ T5094] poison_slab_object+0xa6/0xe0 [ 956.050992][ T5094] __kasan_slab_free+0x37/0x60 [ 956.055769][ T5094] kfree+0x14a/0x380 [ 956.059671][ T5094] device_release+0x99/0x1c0 [ 956.064343][ T5094] kobject_put+0x22f/0x480 [ 956.068811][ T5094] hci_conn_del+0x8f0/0xc70 [ 956.073339][ T5094] hci_abort_conn_sync+0x583/0xde0 [ 956.078478][ T5094] __hci_acl_create_connection_sync+0x622/0x9c0 [ 956.084743][ T5094] hci_cmd_sync_work+0x22b/0x400 [ 956.089695][ T5094] process_scheduled_works+0x9d7/0x1730 [ 956.095246][ T5094] worker_thread+0x86d/0xd70 [ 956.099838][ T5094] kthread+0x2f0/0x390 [ 956.103911][ T5094] ret_from_fork+0x4b/0x80 [ 956.108336][ T5094] ret_from_fork_asm+0x1a/0x30 [ 956.113111][ T5094] [ 956.115450][ T5094] The buggy address belongs to the object at ffff88802d8e8000 [ 956.115450][ T5094] which belongs to the cache kmalloc-4k of size 4096 [ 956.129531][ T5094] The buggy address is located 54 bytes inside of [ 956.129531][ T5094] freed 4096-byte region [ffff88802d8e8000, ffff88802d8e9000) [ 956.143615][ T5094] [ 956.145945][ T5094] The buggy address belongs to the physical page: [ 956.152369][ T5094] page:ffffea0000b63a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d8e8 [ 956.162527][ T5094] head:ffffea0000b63a00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 956.171464][ T5094] flags: 0xfff80000000840(slab|head|node=0|zone=1|lastcpupid=0xfff) [ 956.179441][ T5094] page_type: 0xffffffff() [ 956.183769][ T5094] raw: 00fff80000000840 ffff888014c42140 ffffea0001e3c800 dead000000000002 [ 956.192351][ T5094] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 956.200929][ T5094] page dumped because: kasan: bad access detected [ 956.207336][ T5094] page_owner tracks the page as allocated [ 956.213051][ T5094] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 14105, tgid 14105 (syz-executor.2), ts 254027397620, free_ts 253990150664 [ 956.235559][ T5094] post_alloc_hook+0x1ea/0x210 [ 956.240337][ T5094] get_page_from_freelist+0x33ea/0x3580 [ 956.245881][ T5094] __alloc_pages+0x256/0x6a0 [ 956.250473][ T5094] alloc_slab_page+0x5f/0x160 [ 956.255167][ T5094] new_slab+0x84/0x2f0 [ 956.259258][ T5094] ___slab_alloc+0xc73/0x1260 [ 956.263962][ T5094] __kmalloc+0x2e3/0x4a0 [ 956.268205][ T5094] tomoyo_realpath_from_path+0xcf/0x5e0 [ 956.273763][ T5094] tomoyo_check_open_permission+0x255/0x500 [ 956.279664][ T5094] security_file_open+0x69/0x570 [ 956.284606][ T5094] do_dentry_open+0x327/0x15a0 [ 956.289375][ T5094] path_openat+0x2860/0x3240 [ 956.294238][ T5094] do_filp_open+0x235/0x490 [ 956.298744][ T5094] do_sys_openat2+0x13e/0x1d0 [ 956.303430][ T5094] __x64_sys_openat+0x247/0x2a0 [ 956.308291][ T5094] do_syscall_64+0xfb/0x240 [ 956.312804][ T5094] page last free pid 5092 tgid 5092 stack trace: [ 956.319129][ T5094] free_unref_page_prepare+0x968/0xa90 [ 956.324614][ T5094] free_unref_page+0x37/0x3f0 [ 956.329300][ T5094] __put_partials+0xeb/0x130 [ 956.333895][ T5094] put_cpu_partial+0x17c/0x250 [ 956.338663][ T5094] __slab_free+0x2e8/0x3d0 [ 956.343082][ T5094] qlist_free_all+0x5e/0xc0 [ 956.347678][ T5094] kasan_quarantine_reduce+0x14f/0x170 [ 956.353145][ T5094] __kasan_slab_alloc+0x23/0x80 [ 956.358036][ T5094] kmem_cache_alloc+0x172/0x350 [ 956.362907][ T5094] jbd2__journal_start+0x17c/0x620 [ 956.368098][ T5094] __ext4_journal_start_sb+0x215/0x5b0 [ 956.373577][ T5094] __ext4_unlink+0x41b/0xb30 [ 956.378173][ T5094] ext4_unlink+0x1af/0x560 [ 956.382598][ T5094] vfs_unlink+0x365/0x600 [ 956.386928][ T5094] do_unlinkat+0x4ae/0x830 [ 956.391346][ T5094] __x64_sys_unlink+0x49/0x60 [ 956.396060][ T5094] [ 956.398400][ T5094] Memory state around the buggy address: [ 956.404044][ T5094] ffff88802d8e7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 956.412290][ T5094] ffff88802d8e7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 956.420359][ T5094] >ffff88802d8e8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.428421][ T5094] ^ [ 956.434061][ T5094] ffff88802d8e8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.442123][ T5094] ffff88802d8e8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 956.450202][ T5094] ================================================================== [ 956.463811][ T5094] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 956.471062][ T5094] CPU: 1 PID: 5094 Comm: kworker/u9:6 Not tainted 6.8.0-rc4-next-20240214-syzkaller #0 [ 956.480725][ T5094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 956.490907][ T5094] Workqueue: hci4 hci_cmd_sync_work [ 956.496165][ T5094] Call Trace: [ 956.499641][ T5094] [ 956.502675][ T5094] dump_stack_lvl+0x241/0x360 [ 956.507397][ T5094] ? __pfx_dump_stack_lvl+0x10/0x10 10:47:28 executing program 4: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 10:47:28 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000100)={0x0, 0x3ff9, 0x8, 0x0, 0x20}, &(0x7f0000000180), &(0x7f00000001c0)) [ 956.512663][ T5094] ? __pfx__printk+0x10/0x10 [ 956.517302][ T5094] ? preempt_schedule+0xe1/0xf0 [ 956.522280][ T5094] ? vscnprintf+0x5d/0x90 [ 956.526647][ T5094] panic+0x349/0x860 [ 956.530613][ T5094] ? check_panic_on_warn+0x21/0xb0 [ 956.535776][ T5094] ? __pfx_panic+0x10/0x10 [ 956.540328][ T5094] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 956.546415][ T5094] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 956.552782][ T5094] ? print_report+0x502/0x550 [ 956.557502][ T5094] check_panic_on_warn+0x86/0xb0 [ 956.562482][ T5094] ? __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 956.568942][ T5094] end_report+0x6e/0x140 [ 956.573256][ T5094] kasan_report+0x154/0x180 [ 956.577809][ T5094] ? trace_contention_end+0x3c/0x100 [ 956.583142][ T5094] ? __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 956.589602][ T5094] __hci_acl_create_connection_sync+0x6e4/0x9c0 [ 956.595887][ T5094] ? __pfx___mutex_lock+0x10/0x10 [ 956.600959][ T5094] ? __pfx___hci_acl_create_connection_sync+0x10/0x10 [ 956.607857][ T5094] ? hci_cmd_sync_work+0x2be/0x400 [ 956.613372][ T5094] ? kfree+0x14a/0x380 [ 956.617476][ T5094] ? __pfx___hci_acl_create_connection_sync+0x10/0x10 [ 956.624373][ T5094] hci_cmd_sync_work+0x22b/0x400 [ 956.629360][ T5094] ? process_scheduled_works+0x8e1/0x1730 [ 956.635132][ T5094] process_scheduled_works+0x9d7/0x1730 [ 956.640737][ T5094] ? __pfx_process_scheduled_works+0x10/0x10 [ 956.646761][ T5094] ? assign_work+0x364/0x3d0 [ 956.651482][ T5094] worker_thread+0x86d/0xd70 [ 956.656096][ T5094] ? __kthread_parkme+0x169/0x1d0 [ 956.661148][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 956.666351][ T5094] kthread+0x2f0/0x390 [ 956.670430][ T5094] ? __pfx_worker_thread+0x10/0x10 [ 956.675549][ T5094] ? __pfx_kthread+0x10/0x10 [ 956.680147][ T5094] ret_from_fork+0x4b/0x80 [ 956.684585][ T5094] ? __pfx_kthread+0x10/0x10 [ 956.689183][ T5094] ret_from_fork_asm+0x1a/0x30 [ 956.693971][ T5094] [ 956.697286][ T5094] Kernel Offset: disabled [ 956.701608][ T5094] Rebooting in 86400 seconds..