0x2000038a) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0xa207000000000000}, 0x0) 16:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x2, r1) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x101f) 16:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x301, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffdef) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x1f10) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0xf0ffffff00000000}, 0x0) 16:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x125d, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x40004) 16:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x301, r1) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x2302) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0) 16:55:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x40004) 16:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x125e, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0xffffffff00000000}, 0x0) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xeffd) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, 0x0, 0x40004) 16:55:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00', r1) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r4, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x814) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xfdef) 16:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x125d, r1) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0xfffffffffffff000}, 0x0) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x125f, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x3ffff) 16:55:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x11}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x8800) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x2}, 0x0) 16:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x125e, r1) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x1000000) 16:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1260, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3}, 0x0) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x101f9bf) 16:55:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x4000000) 16:55:01 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002a0001002abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1b9541880579c7a2901efb4dd714f0ceb48c716f3c73e28e72b5b84872a4e0e4a332c4ba5ceb6a355c6d606ec5e1c8273f8d89400e439fb9518fd4e52e96a325aa73db9ecfcb91585a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x4}, 0x0) 16:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x125f, r1) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x1f100000) 16:55:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket(0x1e, 0x5, 0xe7e) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x800, 0x2c}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_batadv\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d1c05115f10ed31bdc018b92fb6c01ceaa6c451e990fd0e5"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4b92bec7c8c20c00287ef1bcde79c5f502b453c991d54e5c"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1261, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x23020000) 16:55:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x109001) read$snapshot(r0, &(0x7f0000000000)=""/140, 0x4e) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x7}, 0x0) 16:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1262, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1260, r1) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xbff90101) 16:55:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x100000000000, 0x400000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00', r0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x19c, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x2be9642f}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x19c}, 0x1, 0x0, 0x0, 0x8894}, 0x40000) write$snapshot(r1, 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x8, 0x40800) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00', r0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0x7) read$snapshot(r1, &(0x7f0000000000)=""/138, 0x8a) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x8}, 0x0) 16:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1263, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xeffdffff) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe}, 0x0) 16:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1261, r1) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xffff0300) 16:55:02 executing program 3: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r3], 0x5c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r5], 0x5c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r7) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r8], 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf251e000000100024800c0002000202aaaaaaaaaaaa08000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0800f000", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000070002480640003800c000500fcffffffffffffff3c0003800c0004000000000000000000060001000300000006000100000000000c0004000200aaaaaaaaaaaa060003000000000006000300a2aa0000050002000200000008000400ffff0000080001000200000008000100050000000c0006000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r10 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r10, &(0x7f0000000300)=""/138, 0x8a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', r10) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf}, 0x0) 16:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1264, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xfffffdef) [ 1566.061627] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1566.081667] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) [ 1566.120233] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1262, r1) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x60}, 0x0) 16:55:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a0b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x7ffffffff000) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1265, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0}, 0x0) 16:55:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/60, 0x3c) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80400, 0x0) 16:55:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x7ffffffffffff) 16:55:02 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1267, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1263, r1) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x300}, 0x0) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xf0ffffff7f0000) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x100000000000000) 16:55:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0xa0300) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x700}, 0x0) 16:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1268, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x400000000000000) 16:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1264, r1) 16:55:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00', r0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x10, 0x6, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4040) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x1f10000000000000) 16:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1269, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x7a2}, 0x0) 16:55:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x90, 0x260080) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x2302000000000000) 16:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1265, r1) 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe00}, 0x0) 16:55:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x101200) read$snapshot(r0, &(0x7f00000000c0)=""/158, 0x9e) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1274, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1267, r1) 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf00}, 0x0) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xbff9010100000000) 16:55:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d00)={0x0}}, 0x24004845) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x800, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3a9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)={0x7c, r5, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x200000d0) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0xd8, r5, 0x4, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xb8, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x3}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xd, 0x1, @random="f9f6c5c468467797b6"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x6}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="25816916db3b"}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x37}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xffffffff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x400}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x707d}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x200}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x6}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x1}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4a}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) r10 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r10, &(0x7f0000000300)=""/138, 0x8a) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1276, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40004) [ 1567.204244] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x6000}, 0x0) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xeffdffffffffffff) 16:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1268, r1) [ 1567.251253] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:03 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bind$vsock_dgram(r3, &(0x7f00000003c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x78, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x65, 0x4, "3818089c7de6999ab35d1b9b17b1086ba3d1072f24a6f475a2347426df8a5d9ec675e3e298602fbfd8c45138a1646498813518091a3179dfca258c15f12808150d20ae176884459458b9532f415a1013c62bb9ab819aedf042cdba8681419f7570"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x40044) 16:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:03 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xffff030000000000) 16:55:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xa207}, 0x0) 16:55:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xffffffff00000000) 16:55:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1269, r1) 16:55:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x240000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf000}, 0x0) 16:55:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1278, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xffffffffffff0700) 16:55:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x40004) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0xfffffffffffffdef) 16:55:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x1279, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x30000}, 0x0) 16:55:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x400000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000001, 0x500) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="3204510b0000fcdbdf25620000000c009900050000002c0000000600b400970900000600b400c71000000600b4006e2100000600b300060000000600b30002000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) write$snapshot(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) read$snapshot(r1, &(0x7f00000000c0)=""/164, 0xf821285619ee07cb) r3 = socket(0x2e, 0x0, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x4000) socket$inet(0x2, 0x1, 0x9) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x4a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) 16:55:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x34000}, 0x0) 16:55:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1274, r1) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x200c0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000040)) 16:55:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000000)=@raw=[@ldst={0x0, 0x1, 0x6, 0x6, 0x9, 0xffffffffffffffff, 0xfffffffffffffff0}, @exit, @map={0x18, 0x3, 0x1, 0x0, r0}], &(0x7f0000000040)='GPL\x00', 0x7e8e, 0x30, &(0x7f0000000080)=""/48, 0x41000, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x1, 0x40, 0xfffffff9}, 0x10}, 0x78) 16:55:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x400000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000001, 0x500) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="3204510b0000fcdbdf25620000000c009900050000002c0000000600b400970900000600b400c71000000600b4006e2100000600b300060000000600b30002000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x40080) write$snapshot(r1, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) read$snapshot(r1, &(0x7f00000000c0)=""/164, 0xf821285619ee07cb) r3 = socket(0x2e, 0x0, 0x7ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x4000) socket$inet(0x2, 0x1, 0x9) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x4a}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x21e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x800) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 16:55:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x127a, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x400300}, 0x0) 16:55:04 executing program 3: ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, [@map={0x18, 0x7, 0x1, 0x0, r0}]}, &(0x7f0000000140)='GPL\x00', 0x6, 0xe2, &(0x7f0000000180)=""/226, 0x40f00, 0x10, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x8, 0x400004}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x3ff, 0x1}, 0x10}, 0x78) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x320, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400d0}, 0x9000) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000300)=""/138, 0x8a) 16:55:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1276, r1) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xfffffffffffffffb, 0x444042) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="328b51e7f987"}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x854}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffff}, 0x0) 16:55:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000040)=@raw=[@ldst={0x3, 0x1, 0x1, 0x0, 0x4, 0x100, 0x10}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000080)='syzkaller\x00', 0xfffffffa, 0xfb, &(0x7f00000000c0)=""/251, 0x40f00, 0x0, [], 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xf, 0x10000, 0x1f}, 0x10, 0x167c2}, 0x78) 16:55:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x127b, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}}, 0x10000020) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) 16:55:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x101200) read$snapshot(r0, &(0x7f00000000c0)=""/158, 0x9e) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0) 16:55:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1277, r1) 16:55:04 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x82) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000080)='SMC_PNETID\x00', r0) 16:55:04 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0x8a) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 16:55:04 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f0000000100)=""/60, 0x3c) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x80) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80400, 0x0) 16:55:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x2, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000061402002abd7000fedbdf250800010002000000080001000100000008000100000000003c71cab682c1c396ec9e8e3a6d468d4f04258ac4c3493a09d04b98281b"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000851) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x10b201) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), 0x4) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0) 16:55:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x5, 0x3, 0x7) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00', r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 16:55:04 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x127c, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:04 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={0x0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000000000000000000"], 0x28}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r3], 0x5c}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r4) sendmsg$IEEE802154_SET_MACPARAMS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r5], 0x5c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r7) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r8], 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="00012cbd7000fddbdf251e000000100024800c0002000202aaaaaaaaaaaa08000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="0800f000", @ANYRES32=0x0, @ANYBLOB="0c000600020000000200000070002480640003800c000500fcffffffffffffff3c0003800c0004000000000000000000060001000300000006000100000000000c0004000200aaaaaaaaaaaa060003000000000006000300a2aa0000050002000200000008000400ffff0000080001000200000008000100050000000c0006000200000000000000"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r10 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r10, &(0x7f0000000300)=""/138, 0x8a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', r10) 16:55:04 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1278, r1) 16:55:04 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3000000}, 0x0) 16:55:04 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xe2d0f95822221e52}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2040}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffea1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7fffffff}]}, 0x2c}}, 0x20000000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) [ 1568.404820] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.438525] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 16:55:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x127d, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:05 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x125e, r1) 16:55:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) socket$inet(0x2, 0x80000, 0x551) read$snapshot(r4, &(0x7f0000000140)=""/125, 0x7d) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x80}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40d0}, 0x10004800) 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x4000000}, 0x0) 16:55:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) read$snapshot(r1, &(0x7f0000000300)=""/138, 0xbd) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x214, 0x0, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x1f8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2f1b}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x600000}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x1a}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x214}}, 0x4010) 16:55:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x2, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x11}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x8800) r4 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x80, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x127e, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x1279, r1) 16:55:05 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) read$midi(r0, &(0x7f0000000000)=""/17, 0x11) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x2, 0x329b03) read$snapshot(r1, &(0x7f0000000300)=""/138, 0x8a) 16:55:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1a, 0x4, 0x8001, 0x7, 0x82, 0xffffffffffffffff, 0xcf, [], 0x0, r0, 0x0, 0x5, 0x3}, 0x40) 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x7000000}, 0x0) 16:55:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) write$snapshot(r1, &(0x7f00000000c0)="6922bd221a7a757d761f83b0f5c5e289a7e9da8d26454a4ec6e3e2f0e4fe5fc65a5d3e53397759606eef57a284348653e13d4d9542d9e6ee1d05fbf4b14d6e0845bfa6af6ac15817f79610077e0f5a7d68ec10991fb5303b94c8f977d72ab333af8c13b6a5997c51a9a6c50fb74185b0c307262a8f089b837a89993c8eb35c005176525cfb41279ea003f52a1b4b78a7a68e61e1bbcfafd19bbd0b433ed0d610dfd0c38842e02735c2c9f333d416ccaa1a4a93ebe61af7c04a29cce44532115ebaa1162d", 0xc4) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000000)={@private0}, &(0x7f0000000040)=0x14) 16:55:05 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) read$midi(r0, &(0x7f0000000000)=""/17, 0x11) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x2, 0x329b03) read$snapshot(r1, &(0x7f0000000300)=""/138, 0x8a) 16:55:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) socket$inet(0x2, 0x80000, 0x551) read$snapshot(r4, &(0x7f0000000140)=""/125, 0x7d) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x80}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40d0}, 0x10004800) 16:55:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x127f, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x8000000}, 0x0) 16:55:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x400041) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 16:55:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x3fe, 0x113081) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x8000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x127a, r1) 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe000000}, 0x0) 16:55:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) socket$inet(0x2, 0x80000, 0x551) read$snapshot(r4, &(0x7f0000000140)=""/125, 0x7d) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x80}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40d0}, 0x10004800) 16:55:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x40000001, 0xc601) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) read$snapshot(r0, 0x0, 0x0) 16:55:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c00, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x30000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x10000, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_FD(r3, 0x1268, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf255500000009000100620000006f000300a1683e1c397ae18161f5586581e5a6e892853a534b14fbfe757f753addc90799f5b031afb6653ab1bc00ff23f73e8457704717d2d0c96eeb43b7a09177bb8558e690f7330030a83c8e039ebe34ea3202ea8ea950d62a62849b20303221d14c2bfa689edad101448ed63f4fa6d5d9a9a5790f90abf9e8e29add98caa682a105c70033d9a7", @ANYRES16, @ANYBLOB="ae113d091d735de60252edbc729cc286cbccbf7a02e71a85b70bd8b74d777f00732c365e71222745cfdedad9f84c1702c3af09ccafb3629e7012a401c11501e74acafcbe09ee"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8802) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000080)) [ 1569.097967] Restarting kernel threads ... done. 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf000000}, 0x0) 16:55:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) socket$inet(0x2, 0x80000, 0x551) read$snapshot(r4, &(0x7f0000000140)=""/125, 0x7d) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x84, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x7f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x80}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40d0}, 0x10004800) [ 1569.135319] Restarting kernel threads ... done. 16:55:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x127b, r1) 16:55:05 executing program 0: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', 0xffffffffffffffff) read$snapshot(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x8081) 16:55:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c01, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x5) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000f80)=ANY=[@ANYBLOB="7805000064c6000025bd7000fbac3ef5c3538e2b92807ab924dbdf25000000003f5db1fa51a99599fa5308eec440593452ed957696e0c3552b37c43caf6b6952daee55df36e94ef0722065e1f34a340509c11665bbaffc959935ac32a9a08c3a63c74c", @ANYRES32=r2, @ANYBLOB="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"], 0x578}, 0x1, 0x0, 0x0, 0x40041}, 0x1080) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0xfffffffffffffffa) ioctl$SNAPSHOT_FREE(r0, 0x3305) 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x60000000}, 0x0) 16:55:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) socket$inet(0x2, 0x80000, 0x551) read$snapshot(r4, &(0x7f0000000140)=""/125, 0x7d) 16:55:05 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1406, 0xa00, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008040}, 0x4) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xbdb, 0x40000) read$snapshot(r0, 0x0, 0x0) [ 1569.280616] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x127c, r1) 16:55:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x9effffff}, 0x0) 16:55:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) read$midi(r1, &(0x7f0000000000)=""/234, 0xea) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:05 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c02, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:05 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x127d, r1) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) r4 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r4, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x80, 0x95a7e8298e418454) read$snapshot(r0, 0x0, 0x0) 16:55:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xa2070000}, 0x0) 16:55:06 executing program 3: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@broadcast, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@private1}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xffffff51) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x218, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x927d452288939596}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x218}, 0x1, 0x0, 0x0, 0x8840}, 0x240428c0) r12 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r12, &(0x7f0000000300)=""/138, 0x8a) 16:55:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c03, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x127e, r1) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) read$snapshot(0xffffffffffffffff, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0220fc83", @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25010000000000000009410000004c00180000000375647000"/98], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x801) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc851) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0xa8, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9a}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3ff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa8}, 0x1, 0x0, 0x0, 0x1}, 0x800) read$snapshot(r1, 0x0, 0x0) 16:55:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffd, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x34600, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x5000, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffff}, 0x0) 16:55:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c05, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x127f, r1) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) read$snapshot(0xffffffffffffffff, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 16:55:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c06, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r3, 0x3312, 0x240000000000000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) read$snapshot(0xffffffffffffffff, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffff000}, 0x0) 16:55:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe8, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x43}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4044051}, 0x40040001) 16:55:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c07, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x9e17839bc1340f90) read$snapshot(r0, 0x0, 0x0) 16:55:06 executing program 0: sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fff}, @NL80211_ATTR_PMK={0x14, 0xfe, "c46d068d18f5a57c45da5fc45031dddf"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "a5ce5a6ca3a2e5549319dbdb5c1206cf"}, @NL80211_ATTR_SSID={0x19, 0x34, @random="1205a21c09ce2dc5a2acba679230a23a6f217dc7f3"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "a9ac68a42924b946d20b6042aedf7d9c"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xe8f}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x763}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x2c43) read$snapshot(r1, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x3f, 0x4000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x100, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x3dd}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0xff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x1}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1f}, {0x8, 0xb, 0x521d3183}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1f}, {0x6, 0x16, 0x40}, {0x5}, {0x6, 0x11, 0xfffe}, {0x8, 0xb, 0x6}}]}, 0x100}, 0x1, 0x0, 0x0, 0xc000}, 0x40) 16:55:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0) 16:55:06 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x1ac, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_RULES={0x18c, 0x22, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffb85}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6e787fe0}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb67c}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2e8f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf2ee}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x401}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x42}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1ac}}, 0x1) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000300)=""/138, 0x8a) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, 0x0, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x320a}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xffff8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}]}, 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x4000) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x240000000000000) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r3, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c09, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c01, r1) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r3, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0xa5c2, 0x680002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000000)=0xfc2c) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff9e}, 0x0) 16:55:06 executing program 0: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400000) read$snapshot(r0, 0x0, 0x0) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r2, &(0x7f0000000140)=""/125, 0x7d) 16:55:06 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) read$midi(r1, &(0x7f0000000000)=""/195, 0xc3) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', r1) 16:55:06 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x5421, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:06 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffffff0}, 0x0) 16:55:06 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c02, r1) 16:55:06 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0xfffffff800000000) 16:55:06 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x800, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r2, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/135, 0x87) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x5450, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x3000000000000}, 0x0) 16:55:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r1) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r2, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff0000000500280000000000080002"], 0x5c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r1, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000300)=""/138, 0x8a) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe8, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x80) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r2) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffe00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040880}, 0x80) 16:55:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="ac02000069d6aa9225385cb71b0dba26e022d324bc95debe601451c88f76da0c4c1a2184d3b70cdb04fbe546a3264648a94453255bca5a00df33835f8457d2ba3b359cea41afe399c18bcdde16628d3fc096214bcdb4d4f9568f408d8ba8c6aef7504b", @ANYRES16=r1, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x4}, 0x4040004) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) read$snapshot(r2, 0x0, 0x42) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x100) 16:55:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x5451, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0) [ 1570.700614] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r2, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x5c39c1) read$snapshot(r0, 0x0, 0x0) 16:55:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c04, r1) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x5452, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1570.769135] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5, 0x1, r0}, 0x14) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x400100, 0x0) 16:55:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x8) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r1, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x401, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x5e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x800) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 16:55:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c05, r1) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x5460, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x28c000) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r1, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x40049409, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/127, 0x7f) 16:55:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0) 16:55:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c07, r1) 16:55:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r1, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1346, 0x2000) read$snapshot(r0, 0x0, 0x0) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x40081271, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:07 executing program 1: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0xa, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x44806) r3 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x208080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='afs_flock_ev\x00', r3}, 0x10) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x34, 0x176482) ioctl$LOOP_SET_DIRECT_IO(r1, 0x5421, 0xf04a00) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0) 16:55:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c09, r1) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x40101283, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:07 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:07 executing program 0: sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="000129dd1200fcdb00000000260004000180"], 0x18}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:07 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) bind$vsock_dgram(r0, &(0x7f0000000000), 0x10) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:07 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5421, r1) 16:55:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x300000000000000}, 0x0) 16:55:07 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401070c9, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x40400) read$snapshot(r0, 0x0, 0x0) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5450, r1) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401070ca, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x400000000000000}, 0x0) 16:55:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x6, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x13c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x80000) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x4201) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000040)=@raw=[@call={0x85, 0x0, 0x0, 0x9d}, @call={0x85, 0x0, 0x0, 0x58}, @exit, @ldst={0x3, 0x5, 0x0, 0x8, 0x2, 0x20, 0x10}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x9, 0x8d, &(0x7f00000000c0)=""/141, 0x40f00, 0x18, [], 0x0, 0x18, r2, 0x8, &(0x7f00000001c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x5, 0x1, 0x8, 0x3}, 0x10, 0x436c, r3}, 0x78) read$snapshot(r0, 0x0, 0x0) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401070cd, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5451, r1) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x700000000000000}, 0x0) 16:55:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x284783) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401870c8, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x7ff, 0x408000) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) read$snapshot(r0, 0x0, 0x0) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x800000000000000}, 0x0) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5452, r1) 16:55:08 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x200000) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1000, 0x701680) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x1) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401870cb, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x0, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xe00000000000000}, 0x0) 16:55:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x3, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0xa04204, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5460, r1) 16:55:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x7ff) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401870cc, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x0) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 0: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x6, 0x4, 0x0, 0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7f, 0x4000) read$snapshot(r1, 0x0, 0x0) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x40049409, r1) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf00000000000000}, 0x0) 16:55:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4020940d, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 1: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4d3, 0x472001) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x8, 0x220580) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f00000000c0)={0x1}) read$snapshot(r0, 0x0, 0x0) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x40081271, r1) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x6000000000000000}, 0x0) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x80081270, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) 16:55:08 executing program 1: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000140)=""/125, 0x7d) 16:55:08 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:08 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x40101283, r1) 16:55:08 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x80081272, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 16:55:08 executing program 1: syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000140)=""/125, 0x7d) 16:55:09 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x40000000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) read$snapshot(r0, &(0x7f00000000c0)=""/148, 0x94) 16:55:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xa207000000000000}, 0x0) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401070c9, r1) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0045878, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 16:55:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000002500000226bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="f2ff0c000100f1ff00000800080001006574660014465dc4ea2a5f39c00002081000010080000000010000ecbe80ab7fdffc5a1f0007000000ffff0e0001040000e00755a7c1f558fc07f016547fce2bdc20d4c37d07fa7960a588cd9259c1119ba888c3808ab806dfbd0363738f7a51d126878341a4cd204fcecfa256c5393d5f9edce700bd89db1a2560f8872d5b53fa3561140ab6ee0456e7d116bdeaa20ddf81cad18fff2b4402278484456c6006d7ea17"], 0x48}, 0x1, 0x0, 0x0, 0x4040840}, 0x800) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401070ca, r1) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0045878, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 16:55:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5452, r1) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401070cd, r1) 16:55:09 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000845}, 0x4004) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x7fff, 0x800) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x214000, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) ioctl$SNAPSHOT_FREE(r1, 0x3305) read$snapshot(r1, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5, 0x1) r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x2, 0xa0800) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00', r3) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0101282, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 16:55:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 16:55:09 executing program 0: openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x408000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x504100}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x194, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}]}, 0x194}, 0x1, 0x0, 0x0, 0x8004}, 0x20040000) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x44601) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401870c8, r1) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0189436, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 16:55:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x0) r1 = socket(0x28, 0x800, 0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x81, 0x51}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r6 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x200040) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r6, 0x8008330e, &(0x7f0000000040)) 16:55:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x401870c8, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc020660b, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040)) read$snapshot(r0, 0x0, 0x0) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401870cb, r1) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:09 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = socket(0xa, 0x80000, 0x9c) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x30}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fff}]}, 0x34}}, 0x48044) 16:55:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401870c8, r1) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401870cc, r1) 16:55:09 executing program 1: r0 = syz_open_dev$vcsa(0x0, 0x8, 0x109000) read$snapshot(r0, &(0x7f0000000140)=""/125, 0x7d) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:09 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xffffffffffffffff, 0x200521) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) 16:55:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16:55:09 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4020940d, r1) 16:55:09 executing program 3: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:09 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x401870cc, r1) 16:55:09 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x400, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000013c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}}, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socket$inet6(0xa, 0x3, 0x8ea1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001500)='team\x00', r5) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x43, 0x1000, &(0x7f0000000040)="74f074cad05a51f6847964ee72e10606c9f2d251a47f6b81fa0e609d42d93487ff960616a4b8ea108db68497a65de0affdd7cb0b013d3d793dfe9f402c7722d088de78", &(0x7f00000003c0)=""/4096, 0x6, 0x0, 0xc7, 0x31, &(0x7f00000000c0)="c04fe20a565e0ac6e9fb4f5d46f2abf89803f51f048e7e1ddfb6cdb64b234d2b61e8be67c63175f5607637c35f44d14443e5b418a8ca595e5540ad7a0c4636901f6126d4325898e3537baec3a69e4b4b31f00f3c2b775de05d5a6a039723e5e0b0812d4091afca4b4b05f69c71fe3464caeb1a351e65f6d84f5311e5c1bd00a688d4ac3898a0a52e8aed57d7b6e4f799b898d181ac44f0d35aaebab8d7610f807afb7b337a2b26e94a6a859d9720c02bfe91340a8d5f8b05a66832baca82e045b7ad50a0ce6540", &(0x7f00000001c0)="e382f915875698ac082d7139fbd3678b9a277e85717a6ca0ee779d90208f529f2212f5906dd5565d14cfb2ef6011cdf20b", 0x43e497e5b369ea51, 0x800}, 0x48) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x2, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x7, 0x5}, 0x0, 0x0, &(0x7f0000000080)={0x4, 0xb, 0x7, 0x1}, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8}}, 0x10) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x3}, 0x0) 16:55:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) 16:55:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x80081270, r1) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x67}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xfb}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x4) 16:55:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x5421, r1) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) write$dsp(r1, &(0x7f0000000000)="1f5ebd88968a6ea66d5a4ce2e06abb9a64d8b547634d65e7c2fd78d9ccef9dba84b586f2ccf7e9df7b49b23ec458af93153f352a1d80ec8d0627c061f68c3b37baa683db8fa1a012aff332768c002db5c64ad087312fea37528bf3d86efe2a79bc3aeb2b21d580ec2b80a2dad091f7904bccf146901b54ecbc5d239a5bea6858a10539dfd595b65bad750955fa5a42a3addf33d2d772acf3b055e6b8d3779d986e143b367fa1961034b1ed8d261a084e9e06c7c3efe1ea4c4c6324b750", 0xbd) 16:55:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x80081272, r1) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x7}, 0x0) 16:55:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x400, 0x4000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000013c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000014c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x64, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}}, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) socket$inet6(0xa, 0x3, 0x8ea1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000001500)='team\x00', r5) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r6) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0x43, 0x1000, &(0x7f0000000040)="74f074cad05a51f6847964ee72e10606c9f2d251a47f6b81fa0e609d42d93487ff960616a4b8ea108db68497a65de0affdd7cb0b013d3d793dfe9f402c7722d088de78", &(0x7f00000003c0)=""/4096, 0x6, 0x0, 0xc7, 0x31, &(0x7f00000000c0)="c04fe20a565e0ac6e9fb4f5d46f2abf89803f51f048e7e1ddfb6cdb64b234d2b61e8be67c63175f5607637c35f44d14443e5b418a8ca595e5540ad7a0c4636901f6126d4325898e3537baec3a69e4b4b31f00f3c2b775de05d5a6a039723e5e0b0812d4091afca4b4b05f69c71fe3464caeb1a351e65f6d84f5311e5c1bd00a688d4ac3898a0a52e8aed57d7b6e4f799b898d181ac44f0d35aaebab8d7610f807afb7b337a2b26e94a6a859d9720c02bfe91340a8d5f8b05a66832baca82e045b7ad50a0ce6540", &(0x7f00000001c0)="e382f915875698ac082d7139fbd3678b9a277e85717a6ca0ee779d90208f529f2212f5906dd5565d14cfb2ef6011cdf20b", 0x43e497e5b369ea51, 0x800}, 0x48) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x8004500f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000001c0)={0xfff, 0x6, 0x1f, 0x80, 0x30d}, 0x14) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5432bbe1b4735c66d63f4e7742"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r3 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000016c0)={0x20, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x160, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000092d077101e371cbbbc055fffec2f4e2b944ebbaac38d3e51994a3c3291491c11d3c191ffdf6b17c9", @ANYRES16=r8, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200)={0x6, 0xe39, 0x1, 0x4, 0x4}, 0x14) r9 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x200, 0x0) read$snapshot(r9, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000380)="6c2f4a7bb675ae985b5adc2964187f96", 0x10) 16:55:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0xc0045878, r1) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ba"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "32385938466dda24a51494fdb301419f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) 16:55:10 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x80081272, r1) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x5) 16:55:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0xc0045878, r1) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xe}, 0x0) 16:55:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ba"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "32385938466dda24a51494fdb301419f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4) 16:55:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x100100) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$SNDCTL_DSP_POST(r2, 0x5008, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1ff}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x10001]}, @SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1020, 0x11fec0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', r1) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0xc0101282, r1) 16:55:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ba"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "32385938466dda24a51494fdb301419f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf}, 0x0) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x60, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x20004}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffff7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x30}, 0x24004808) 16:55:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ba"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "32385938466dda24a51494fdb301419f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x200980) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:10 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:10 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0xc0189436, r1) 16:55:10 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x60}, 0x0) 16:55:10 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x5, 0xa, "ba"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "32385938466dda24a51494fdb301419f"}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x4) 16:55:10 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) 16:55:10 executing program 0: sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000810}, 0x404800d) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3ff, 0x20200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x394, 0x33}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200048d1}, 0x4000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', r3) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r7, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r8, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, r10, 0x4, 0x70bd2c, 0xd291, {{}, {@val={0x8, 0x1, 0x1b}, @void, @val={0xc, 0x99, {0xfffffffc, 0x48}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000044}, 0x40080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r4, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0xc020660b, r1) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf0}, 0x0) [ 1574.503104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:11 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1574.578614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0xc0481273, r1) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x300}, 0x0) 16:55:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000000)=0x2, 0x4) 16:55:11 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/104, 0x68) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x81, 0x40100) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250100000014000100fe800000000000000000000000000039"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc000) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4400, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x30200, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x700}, 0x0) 16:55:11 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 0: perf_event_open(0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x8300) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2906c0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00', r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)) 16:55:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x2000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x500, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@private1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x70, r2, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x804}, 0x0) 16:55:11 executing program 1: syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x7a2}, 0x0) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x103000) read$snapshot(r0, 0x0, 0x0) 16:55:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:11 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 16:55:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x0) 16:55:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/122, 0x7a) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 4: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_S2RAM(r1, 0x5421) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r0, 0x1}, 0x14}}, 0x0) r3 = getpgid(0x0) r4 = getpgid(r3) r5 = getpgid(r4) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000140)='ns/mnt\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r6) 16:55:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 16:55:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x4201) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r2, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x1c8, r2, 0x8, 0x70bd27, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x9ee3}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xff}, {0x6, 0x11, 0x5}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x81}}, {0x8, 0xb, 0x504a}, {0x6, 0x11, 0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x37d}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xf76}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x8000}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1ff}}]}, 0x1c8}}, 0x4008000) 16:55:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x150, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb1}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0xee7c}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x5}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0xfffffffc}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x775bc665}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x9}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x4}, {0x8}, {0x5, 0x14, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x44004}, 0x40000044) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1) 16:55:11 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:11 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x6000}, 0x0) 16:55:11 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/126, 0x7e) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x501900, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x23) ioctl$SNAPSHOT_FREE(r1, 0x3305) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) 16:55:11 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:11 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) socket(0x23, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r0) read$snapshot(r0, 0x0, 0x0) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:55:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x24882) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x10202) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x24}}, 0x4000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1, 0x101000) bind$802154_dgram(r2, &(0x7f00000000c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) clock_gettime(0x7, &(0x7f0000000040)) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000000)=0x8000, 0x4) 16:55:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xa207}, 0x0) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:55:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x301281) r1 = getpgid(0x0) getpgid(r1) getpid() r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/user\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x800000) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x3ac9) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x400100) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f00000000c0)={0x81, [0x5, 0x6d9c5d5b], 0x3ff}, 0x10) r5 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r5, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) ioctl$LOOP_SET_CAPACITY(r5, 0x4c07) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x4, 0x6, "884a11", 0x7, 0x8}) [ 1575.650097] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:55:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf000}, 0x0) [ 1575.701876] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0x60, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 16:55:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x10000, 0x20000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x92}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e73cd209c754"}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8080) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) 16:55:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 16:55:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff2178, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffc00}, @map={0x18, 0x7, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0xb6, 0xb, 0x8, 0x2, 0xfffffff8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x4, 0x6, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x33}, @alu={0x4, 0x0, 0x2, 0x4, 0x0, 0x8, 0x8}, @exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1e00, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x6, 0x2, 0x8}, 0x10}, 0x78) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) 16:55:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x80880) read$snapshot(r0, 0x0, 0x0) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x80000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000040)) write$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(0xffffffffffffffff, 0x80083314, &(0x7f0000000080)) 16:55:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x100000000000000, 0x80000) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x14400) read$snapshot(r0, 0x0, 0x0) 16:55:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 16:55:12 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) connect$vsock_dgram(r0, &(0x7f0000000780)={0x28, 0x0, 0xffffffff, @local}, 0x10) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@map=0x1, 0xffffffffffffffff, 0x9}, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x100, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xaa}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x7}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0xfffffffd}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2f9}, {0x8, 0xb, 0x7}}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x20008000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x7, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x3}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x1, 0x4, 0x1ff}, &(0x7f0000000340)=0xdd, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=0x5}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500)='ethtool\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv0\x00'}) r4 = openat$md(0xffffffffffffff9c, &(0x7f0000000740)='/dev/md0\x00', 0x4220c0, 0x0) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x14, r3, 0x100, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x40000) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0x0, 0x3}, 0x6) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x3, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1401, 0x20, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040800) 16:55:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x7, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x7a}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x158}, @generic={0xe8, 0x2, 0x6, 0x6, 0x2}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10001}], &(0x7f0000000040)='GPL\x00', 0x80000000, 0xaa, &(0x7f0000000080)=""/170, 0x41100, 0x0, [], 0x0, 0x6, r0, 0x8, &(0x7f0000000140)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x2, 0x2, 0x9, 0xded3}, 0x10, 0xffffffffffffffff, r0}, 0x78) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r1, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x41}}}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x60, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fff}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004854}, 0x30000002) 16:55:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r3, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) r4 = getpgid(0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x84, r3, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40080}, 0x51) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:12 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="20000000753e74ef929d56f69102a8f5a5b05b5afe6ebcb4917c9812ddbb4877d5b9233c73", @ANYRES16=r2, @ANYBLOB="20002abd7000fcdbdf251c0000000c009900ff0f000034000000"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x4008804) 16:55:12 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x501000) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) socket$inet6(0xa, 0x80000, 0x7017475f) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0xae) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xa3, 0x210000) 16:55:12 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:12 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 16:55:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:12 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:13 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x70}, 0x1, 0x0, 0x0, 0x11}, 0x4000) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000300)=""/138, 0x8a) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 16:55:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10004000) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x202240, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) ioctl$SOUND_PCM_READ_RATE(r3, 0x80045002, &(0x7f0000000040)) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xb07, 0x200) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="f41e1779afe865"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2431997a2b74a721feed3ebf3d522ced"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00', r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff0000000500280000000000080002"], 0x5c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r7, 0xbcc20cd552d630d7, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "012ecae21effbe2fc3e07d14f20ce834"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x12}]}, 0x30}}, 0x4001) r8 = getpgid(0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00', r9) 16:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 16:55:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r1, 0x30, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff366}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r5, 0x0, 0x0) 16:55:13 executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f0000000080)=@delchain={0x12b0, 0x65, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x2}, {0xfff3, 0xe}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x1278, 0x2, [@TCA_BASIC_ACT={0x1f4, 0x3, [@m_vlan={0x8c, 0xd, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xb9a}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xffff, 0x2, 0x5, 0xfff, 0x4}, 0x1}}]}, {0x29, 0x6, "79b4e8afe8f151c8af62298b034eff4420feeed9120301524b3d991477320423b69a604305"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0x164, 0x19, 0x0, 0x0, {{0x7, 0x1, 'ct\x00'}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x14, 0x8, "83a6065e3c705133f4a8069d776a2454"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1a4e38a2f19e7a2ce2f2111b0084d6b4"}, @TCA_CT_LABELS={0x14, 0x7, "1a915fa302b0b8b513f81d793453e310"}]}, {0xf7, 0x6, "b882d1c9049023f5af035dc83169aa17c94495fae9320ea843c25f01a2a53bde89b40cb74c0c19350024c4d02e04ae76ac6c2c483e17f3876329f491bba4dcc592dfbe2698ed4fec0d3c40d9bee488d6146af8e5ae09d37a5c652ea4ef286118126944740ec9062cde240417c457c64060d1c2133157c1a9c98cf56159fd3272ce188f5ee6f92c93a5677f72f6c8630d7de7e692d7f04367c5e2cdbba9d4dba6a8efe13a03f3d7643460ec247ec5d984d82591b3f9b51ef1c101d5a85f8987084309cd7242a676b4e3fb614e88a2a8e35c94137c32357a838a953143d480c86ec81aa856d14cb3860cfa1ee6ec7d923771f8a5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_POLICE={0x107c, 0x4, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0xff, 0x0, 0x0, 0x5, 0xd7c, 0x3, 0x3ff, 0x7ff, 0x2, 0x7f, 0x1, 0x7460, 0x2, 0x3, 0x18, 0x1, 0x94bc, 0xffffff81, 0x20, 0x0, 0x6, 0x0, 0x8, 0x1, 0x7, 0x7ff, 0x8, 0xfffffff7, 0x0, 0x6ffd, 0xfffffffb, 0x4, 0x2, 0x1, 0x1, 0x400, 0x29ddcc57, 0x7fffffff, 0x100, 0x9, 0x0, 0x8001, 0x7, 0x80, 0xffffffe1, 0x7, 0x9, 0x80000000, 0x1, 0x401, 0x42e1, 0x0, 0x2, 0x4, 0x4d3, 0x8, 0x400, 0x6, 0xfff, 0xffffe76a, 0x5, 0x3, 0x0, 0x6, 0xff, 0x0, 0x7, 0x7, 0x0, 0x8, 0xa55, 0x2, 0x19f, 0x3, 0x1, 0x5, 0x8000, 0xffffffcb, 0x4, 0x7, 0x7, 0x2, 0x1, 0xfffffff9, 0x7ff, 0x1f, 0x1, 0x211, 0x1, 0x400, 0x200, 0xc1, 0xb8f4, 0x4, 0x7fff, 0x3ac0, 0x7, 0x200, 0x4, 0x6, 0x0, 0xfff, 0xb3e, 0x5, 0x9, 0x1, 0xe0, 0x7, 0x84, 0x9, 0x7, 0xffffff98, 0x9, 0x1, 0x20, 0x2, 0x9, 0x9, 0x9b6, 0x0, 0x9, 0x4, 0x800, 0xbd, 0x6, 0x2, 0xc91, 0xffffffff, 0x1, 0x7, 0xfff, 0x85b, 0xffffffc0, 0x67, 0xf49, 0x4, 0x3, 0x4, 0x8, 0x7fffffff, 0x1f, 0x23, 0x7f, 0x10001, 0x400, 0x1000, 0x18000, 0x7f, 0xfcec, 0x80, 0x4, 0x8000, 0x0, 0x5, 0x0, 0x8, 0xff, 0x40, 0x1, 0x2, 0xffffffff, 0x5, 0x2, 0x3, 0x6, 0x3ff, 0x1, 0x4, 0x0, 0x3, 0x8000, 0x5, 0x3, 0x40, 0x4, 0x9, 0x2, 0x2, 0x1, 0x8, 0x8, 0x3, 0x81, 0xb77, 0xffff0001, 0x7, 0x7, 0xffff1320, 0x4, 0x1, 0x101, 0x7, 0x80, 0x10001, 0x8001, 0x6, 0x7, 0x0, 0x1ff, 0xfff, 0x400, 0x62, 0x9, 0x6, 0x0, 0x651b0f1b, 0x46cc, 0xbd, 0x7, 0x9, 0x6, 0xfff, 0x7, 0x3ff, 0x9, 0x5, 0xff, 0x2, 0x80, 0x7e5, 0xc, 0x218f6bf5, 0x4, 0xfff, 0x5, 0x8, 0x9, 0x9, 0x0, 0xfffffff9, 0x8, 0x14ad, 0x7, 0x8000, 0x0, 0xffff3f77, 0x0, 0x400, 0x6, 0x6, 0x6, 0x101, 0xa506, 0x66b, 0x3, 0x7, 0x6, 0x8001, 0x36481f3f, 0x7, 0x10000, 0x6, 0x401, 0xfffffeff, 0x2e]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xfffffffe, 0x32087b2d, 0x5, 0x8000, 0x7, 0x6, 0x3, 0x8, 0x374, 0x7ff, 0x9, 0x1, 0x2, 0xe3e, 0x2, 0xffffff0f, 0x1000, 0x3f, 0x7, 0x0, 0x2, 0x6, 0xf4, 0x400, 0x80000000, 0x4, 0x3, 0x5, 0x8000, 0x7ff, 0x2, 0x1ff, 0x6, 0x1ff, 0x3ff, 0x3, 0x7, 0x3f, 0x2, 0xfffffffb, 0x1, 0x4, 0x1, 0xc0, 0x40, 0x57d, 0x67, 0x8, 0x8, 0x2, 0xffff, 0xffffff80, 0x8, 0x80, 0xff, 0x5, 0x6, 0x3, 0x1, 0x7b6f, 0x9, 0x9, 0x6, 0xff, 0x7, 0x8, 0x80, 0xcc8, 0x0, 0xd8, 0x1, 0x6, 0x101, 0x4, 0x10001, 0x6, 0x8, 0x80, 0xfffffff8, 0x4, 0x6d, 0x9, 0x1, 0x6, 0xffffffff, 0x1, 0x1, 0x7ff, 0x8, 0x6, 0x401, 0x7fff, 0x3, 0x240, 0x800, 0x80000001, 0x69cd, 0xffffffff, 0x1, 0x9, 0x3, 0x1, 0x2e, 0x75d15b85, 0x7, 0x0, 0x8, 0x1, 0x1b00000, 0x8, 0x7, 0x9, 0xe3, 0x7b, 0x68f1, 0x2, 0x1, 0x81, 0x80000000, 0x80, 0x10000, 0xffffffe1, 0x80000001, 0x81, 0x2, 0xe9, 0xffffffff, 0x1f, 0x1, 0x3, 0x1ff, 0x7e5, 0x4, 0x1, 0x3, 0x2, 0x5, 0x40, 0x7, 0x9, 0x1, 0x401, 0x1, 0x7, 0x0, 0x3, 0x8, 0x1, 0x1be, 0x8000, 0x74, 0x5, 0x6, 0x8000, 0xf4, 0x7, 0xea9, 0x9, 0xfffffff7, 0x7fffffff, 0x9, 0x4, 0x6, 0x10000, 0x6, 0x4, 0x7, 0x6, 0x7, 0x5, 0x6, 0x1, 0x8, 0x4, 0xa51, 0x7, 0x200, 0x3f, 0x8, 0x3, 0x101, 0x8001, 0xfffffc00, 0x6, 0x0, 0x200, 0x80000001, 0x40, 0x4, 0x3, 0x9, 0x3, 0x9, 0x71c2d77d, 0x9, 0xea7, 0x3d9, 0x4, 0xfffffffb, 0x3f, 0x8, 0x8, 0x0, 0x8, 0x0, 0xbd3, 0x1, 0x80000001, 0x2, 0x1, 0x4, 0xff, 0x5, 0x6, 0x72, 0x3e2, 0x0, 0x1, 0x7ff, 0x8, 0x498, 0x53c, 0x200, 0x9, 0x5, 0x7fff, 0x9, 0x2d6, 0x0, 0x3f, 0x3b2, 0x6, 0x8, 0x3, 0xd4e, 0xffff, 0x7, 0x7, 0xd8, 0x5, 0x2, 0xffff21f8, 0x0, 0xfff, 0x4, 0xff, 0x1, 0x5d80000, 0x0, 0xffff91ee, 0x1000, 0x6, 0x7, 0x5536202e]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0xfffffffd, 0x0, 0x9, 0x2, 0x7f, 0x71, 0x8, 0x7, 0xfffffff8, 0xfffffffe, 0xe8606d9, 0xffffffff, 0xbd3, 0x3, 0xfffff000, 0xffff0001, 0x9, 0x9, 0xc2ed, 0x7fff, 0x3, 0x8001, 0x100, 0x10001, 0x6, 0x6, 0x100, 0x9, 0x0, 0x2, 0x5, 0x20, 0x5, 0x100, 0x728, 0x5, 0x1, 0x1, 0x0, 0x2, 0x2, 0x7fff, 0x2, 0x3f, 0x2, 0x9, 0x8, 0x0, 0x0, 0x6, 0x3, 0x7fffffff, 0xdedc, 0x137, 0x8, 0x5, 0x5, 0x0, 0x72, 0x8, 0x400, 0x400, 0x7, 0x6fa, 0x101, 0x35a8, 0x6, 0x2, 0x9, 0x5, 0x0, 0xcd1f, 0x10001, 0xfffffffc, 0x4, 0x3, 0x659, 0x7, 0xfff, 0x2, 0x9, 0x0, 0x0, 0x759, 0x6446, 0x4, 0x3, 0x7, 0xc51, 0x3, 0x1, 0x6, 0xab54, 0x7fff, 0x8, 0x3, 0x9, 0x0, 0x1, 0x2, 0x8, 0x7fff, 0x1, 0x5, 0x7, 0xffffffff, 0xd1, 0xf7, 0xffff, 0x1f, 0x4, 0x6, 0x927, 0x8, 0xfff, 0x8, 0x4f, 0x3d, 0x5, 0x9, 0x100, 0x0, 0x8, 0x7fff, 0x400, 0x6, 0x40, 0x8, 0x89, 0x9, 0x101, 0x9, 0xa9, 0x0, 0x10001, 0x9, 0xe4, 0x1000, 0x5, 0x4, 0x0, 0x69f, 0x1, 0xfffffffd, 0x6f77, 0x9, 0x4, 0x2, 0x7, 0x3ff, 0x2, 0x7, 0x401, 0x73efc877, 0x80, 0xfff, 0xa758, 0x5, 0xa431, 0xfffffff8, 0x10, 0x9, 0x1, 0x4, 0x3, 0x8, 0xfffffffb, 0x2, 0xffffff80, 0x7ff, 0x7f, 0x0, 0x80000001, 0xff, 0x1f, 0x7ff, 0x7ff, 0x4, 0x0, 0x8, 0x37ca, 0x9, 0xa016, 0x3, 0x9, 0xffffffff, 0x100, 0xd3, 0x3, 0xfffffb9e, 0x8, 0x7fffffff, 0x9, 0x8, 0x80, 0x5, 0x8, 0x41b, 0x1ff, 0x3, 0x9, 0x3f, 0x4, 0x400, 0x7fff, 0x100, 0x9, 0x8, 0x101, 0x5, 0x93c, 0x8, 0x5, 0x0, 0xfff, 0x9, 0x9, 0x9c1, 0x9, 0x864e, 0x4, 0x5, 0x5, 0x5, 0x10001, 0xd3, 0x8, 0x10001, 0x1000, 0x4, 0x200, 0x7, 0xe66, 0x7, 0xc7, 0x7, 0x0, 0x1ff, 0x176, 0xffff, 0x7, 0x4, 0xffff, 0xd1, 0x8000, 0x7fffffff, 0x6, 0x38, 0x0, 0x8, 0x0, 0x0, 0x10000, 0x1, 0x3]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7f, 0x2, 0x3, 0x5, 0x4, {0x20, 0x0, 0x3f, 0x9, 0x1, 0x800}, {0x81, 0x2, 0xffff, 0x20, 0x6, 0x10000000}, 0x10001, 0x0, 0x20}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x100, 0x7ef, 0x1, 0x5, 0x115, 0x7, 0x6, 0x3, 0x9, 0x401, 0x7, 0x5, 0xd4, 0x1, 0xdf, 0x7, 0x800, 0x1, 0x0, 0x7ff, 0x8, 0x3, 0x8001, 0x0, 0x7ff, 0x1, 0x4, 0x7, 0x1, 0x3, 0x7fff, 0x7, 0x6, 0x1, 0x3, 0x8, 0x1, 0x8, 0x2, 0x5, 0xff, 0xffff, 0xc4, 0x0, 0xdb98, 0x2, 0x5, 0x6386, 0x43a, 0x6, 0x2000000, 0xffffff80, 0xffffffff, 0x0, 0x6, 0xffffffc4, 0x9, 0x9, 0x8, 0x1ff, 0xdd, 0x9, 0x7, 0x8000, 0x400, 0x100, 0xc7c, 0x80000001, 0xde3, 0xb4, 0x7, 0xa, 0x0, 0x7, 0xd018, 0x2, 0x3, 0x7, 0xffff, 0x0, 0x5, 0x5, 0x0, 0xfffffffa, 0x4, 0x0, 0xeed, 0x4, 0x8, 0x80, 0x2, 0x8, 0x80, 0x1ff, 0xffff6502, 0x81, 0x1, 0x6, 0x2, 0x4, 0x0, 0x7fff, 0x8, 0x2, 0x10001, 0x1, 0x3, 0x3, 0x8001, 0x3, 0x62, 0x3, 0xbd, 0x7, 0xd7a4, 0x7, 0x1, 0x56d, 0x8, 0x3f, 0x8, 0x4, 0x152, 0x1f, 0x80000001, 0x7, 0x4, 0x2, 0x10b, 0x10000, 0x4, 0x6, 0x4, 0x0, 0x80000000, 0x101, 0x8, 0x81, 0x3, 0xd8, 0x5, 0x9, 0x5, 0x3, 0x5, 0x10001, 0x4, 0x8, 0x80000001, 0x5, 0x1, 0x9, 0x6, 0x37ac, 0x1, 0x5, 0x9, 0x3, 0x8, 0x7, 0x6e, 0x2, 0x8, 0x80000001, 0x6, 0x4, 0x5, 0x7ff, 0x7fff, 0x0, 0xffff, 0x8000, 0x1, 0x5, 0x6, 0x45, 0xffffff81, 0x400, 0x200, 0x0, 0x400, 0x76e, 0x20000000, 0x0, 0x9, 0xffffffff, 0x3f, 0x80000001, 0x5, 0x6, 0x0, 0x2400, 0x2, 0x1, 0xbe5f, 0x808, 0x899, 0x3, 0x2, 0x2, 0x7fffffff, 0x10001, 0x18eb, 0x7, 0x62, 0x5, 0xc4, 0x9, 0x5, 0xc28, 0x200, 0xffffffff, 0x9, 0x1, 0x588, 0x80000001, 0x0, 0x2, 0x3f, 0x200, 0x9, 0x9, 0x3, 0x1ff, 0x7, 0x8923, 0x5, 0x6, 0x5, 0x80000001, 0x1, 0xfffffffd, 0xc193, 0xffff0000, 0xffffffff, 0x0, 0x3, 0x89c7, 0x7, 0x7ff, 0x8cc, 0xfff, 0x3f, 0x2, 0x8, 0xa09, 0xfffffffa, 0xb05, 0x5, 0x7f, 0x3ff, 0x4, 0xacb7, 0x0, 0x401, 0xffff89e5]}]}]}}, @TCA_RATE={0x6, 0x5, {0xfe, 0x6}}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x8884}, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x28000) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 16:55:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x733, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10040}, 0x40080) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2a8b00, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x0) [ 1576.839406] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:13 executing program 0: r0 = getpgid(0x0) r1 = getpgid(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x1f, 0x7, 0x3f, 0x4, 0x0, 0x100000001, 0x220, 0xa, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x200, 0xe616}, 0x414, 0x3, 0x8, 0x1, 0x4, 0x100, 0x4}, r0, 0x3, 0xffffffffffffffff, 0x3) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x81, 0x1, 0x7, 0xff, 0x0, 0xaa, 0x20202, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xffffffff, 0x1, @perf_bp={&(0x7f0000000080), 0x1}, 0x1240, 0x9, 0x2b, 0x8, 0x101, 0x4, 0xd3}, r1, 0xf, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r4) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) [ 1576.921980] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x82200) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20, 0xa8fcbc626c785e92) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 16:55:13 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x8800) read$snapshot(r0, 0x0, 0x0) 16:55:13 executing program 1: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x400080) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x80) write$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x100) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r2, &(0x7f0000000300)=""/138, 0xfffffffffffffcf3) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 16:55:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r0, 0x5000, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r3, @ANYBLOB="140002006e657464657673696d300000000000000800030001000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0c00018000000100", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x5352}}, &(0x7f0000000080)='GPL\x00', 0x0, 0xb3, &(0x7f0000000180)=""/179, 0x40f00, 0x1, [], r5, 0x0, r1, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x5, 0x3, 0x1000}, 0x10}, 0x78) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r2, 0xa}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:13 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r0, 0x3312, 0x4) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:13 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x418040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) 16:55:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 16:55:13 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:13 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800100, 0x800) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3f, 0x195400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000100)="7cbb871987666399dd7d2b58015e6cbb923f741ebb6c1360aecbdd9056fb01c21c792e54d975d866017f9e13ffb3220b996fbd6d6ab60522eb34f752da73ad58fea5a589f1d9a6ffe3c752d15b01fb7bdbdf1c855b") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x200200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 16:55:13 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x8, 0x5c}}}}, ["", ""]}, 0x28}}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="527cb22d04fb24495f00", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r4], 0x5c}}, 0x40000084) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r1, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x181301) read$snapshot(r7, 0x0, 0x0) 16:55:14 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0xffffffffffffffff}, 0x6) 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x280001) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xaf9e, 0x2000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0x8040) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000001, 0x200001) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) 16:55:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:55:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00', r0) read$snapshot(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', r0) 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x3cdc80) mmap$dsp(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000006, 0x11, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x101401, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0x40045010, &(0x7f0000000140)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0xfffffffffffffffe) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 16:55:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 16:55:14 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf250f00000008003c00ff00000005002d0001000000050030000100000005002d00010000000a000900ffffffffffff000008002b000200000008002c00ff07000008003200070000ff08003c0001800000"], 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x40840) 16:55:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x18001) read$snapshot(r0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="ca07231e39f664abcf3afe4adbb86e75c950b83f183bc850c6efbd2bedddfce9ce44436957b68b016145414bea6118c90621104d8d99305ca1e48e2b88ad23a66eee0d21cd7963306736e031c890744db99ae7bdc4936d081996f0c75df077a10db20be2f7daa40bddf2de63b58e1fd68dd3eeac183797df1ee1f96d264c8406a7152ee8c14e115f692893bc285f4bfa5a0e6c2d6d98bd04fbfa2d88239738efbe91a1b3d5e38aa642ec", @ANYRESHEX, @ANYBLOB="03042cbd7000ffdbdf2504000000f2573a0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40802) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r3, 0x80083313, &(0x7f00000001c0)) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000180)) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x44, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfb4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000140)) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r5, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) 16:55:14 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="260000000f2402a3c4bd66bfc83e47a66767b0d82efc4a568241aac3c2557b8883d686e2ccbcfce7381091ccf7e50a8ebf708e740ecf168cbed18b58a859ad7b64f4635c9560cdd62fbf5baca36bd661f8edace4fa435d9df418b4c82557b55fa0fa14eb633793d810f93e78579c46e4ddd9627c43097d8ed30cfcbb", @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008c01}, 0x1) 16:55:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180), 0x6) 16:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 16:55:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x280000, 0x0) read$snapshot(r1, &(0x7f0000000040)=""/118, 0x76) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x401) 16:55:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180), 0x6) 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000440)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="f8959aeb099fc4e7ce7e2f330f540634d729aa37c216767213583c", @ANYRES16=0x0, @ANYBLOB="100029bd7000fddbdf250d0000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000300020000001c00018008000100", @ANYRES32=r4, @ANYBLOB="000003000200000008000100", @ANYRES32=0x0, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x1) 16:55:14 executing program 0: semget(0x0, 0x4, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 16:55:14 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r3], 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x8010}, 0x4) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={0x0}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x2, 0x70bd2d, 0x902, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r5, &(0x7f0000000300)=""/138, 0x8a) 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40408d0) read$snapshot(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x2, 0x9, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x1b}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40008) 16:55:14 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x20000) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x9, 0x228000) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xb4, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xae6, 0x2b}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bdae074e7e1dd21665a45ac16556668e0937de2d93e7fabee2af2ad715eda669f73800000000000000ae75ee9500000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffe3c6, 0x6e}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x800) 16:55:14 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180), 0x6) [ 1578.242915] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xa2070000}, 0x0) 16:55:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) 16:55:14 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x21100) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) [ 1578.346249] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1578.396518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:14 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 16:55:14 executing program 0: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x40) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x10000) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x4000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x6c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xafc}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x9, 0x5, 0x7f, 0x3, 0x73b3]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x58}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8001}, 0x20000001) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf2501000000080001004700000008000300", @ANYRES32=0x0, @ANYBLOB="0c002c830000220000000000"], 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x4) write$snapshot(r2, 0x0, 0x0) read$snapshot(r2, 0x0, 0xfffffffffffffff1) [ 1578.446713] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x100) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x18080, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xaf9e, 0x2000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x7, 0x8040) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x80000001, 0x200001) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xfffff000}, 0x0) 16:55:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xd86a, 0x60000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@dev}, &(0x7f0000000080)=0x14) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0xfffffffffffffffd) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) 16:55:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x1, 0x100) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x626b, 0x90000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x37c992f6, 0x34}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 16:55:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 16:55:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x4200) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe4, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x20}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe4}}, 0x40800) 16:55:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 16:55:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800100, 0x800) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3f, 0x195400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000100)="7cbb871987666399dd7d2b58015e6cbb923f741ebb6c1360aecbdd9056fb01c21c792e54d975d866017f9e13ffb3220b996fbd6d6ab60522eb34f752da73ad58fea5a589f1d9a6ffe3c752d15b01fb7bdbdf1c855b") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x200200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 16:55:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:15 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0x8a) 16:55:15 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) socket(0x34, 0x3, 0xa49) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000020838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = getpgid(0x0) getpgid(r4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={[], 0x800, 0x6, 0x1, 0x4, 0x4, r4}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 16:55:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x8080) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000040)) 16:55:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x800100, 0x800) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3f, 0x195400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d4, &(0x7f0000000100)="7cbb871987666399dd7d2b58015e6cbb923f741ebb6c1360aecbdd9056fb01c21c792e54d975d866017f9e13ffb3220b996fbd6d6ab60522eb34f752da73ad58fea5a589f1d9a6ffe3c752d15b01fb7bdbdf1c855b") syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x200200) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) 16:55:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) 16:55:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x157100) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) r3 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x3}, 0x3a) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 16:55:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040810) read$snapshot(r0, &(0x7f0000000300)=""/114, 0x72) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)=0x2) 16:55:15 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x3c}}, 0x0) r2 = socket(0x3, 0x800, 0x570) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x3c}}}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac, {0xf, 0xdc0}}, 0x40, @val={0x8c, 0x10, {0xd6c, "c1635f1e1ef4", @short="3c74cf7bbabacc58"}}}}]}, 0x58}}, 0x80) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0200299d7000fedbdf250100000008002c00f8ffffff0a000900aaaaaaaaaaaa000008002c00ffffff1b716b6f7f"], 0x30}, 0x1, 0x0, 0x0, 0x4049851}, 0x40080) 16:55:15 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) write$cgroup_freezer_state(r0, &(0x7f0000000000)='THAWED\x00', 0x7) socket(0x34, 0x3, 0xa49) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000020838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = getpgid(0x0) getpgid(r4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={[], 0x800, 0x6, 0x1, 0x4, 0x4, r4}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x20000400) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 16:55:15 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x19b700, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000100)=""/128, 0x19) 16:55:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 16:55:15 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x12c, r1, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r4 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r4, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) 16:55:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x5, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200410}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x401, 0x6f}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x1c32) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:15 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x7, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:15 executing program 1: read$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(0xffffffffffffffff, 0x80083313, &(0x7f0000000040)) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x3c}}, 0x0) r2 = socket(0x3, 0x800, 0x570) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r4, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x3c}}}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @disassoc={@wo_ht={{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x2}, @device_b, @device_b, @from_mac, {0xf, 0xdc0}}, 0x40, @val={0x8c, 0x10, {0xd6c, "c1635f1e1ef4", @short="3c74cf7bbabacc58"}}}}]}, 0x58}}, 0x80) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0200299d7000fedbdf250100000008002c00f8ffffff0a000900aaaaaaaaaaaa000008002c00ffffff1b716b6f7f"], 0x30}, 0x1, 0x0, 0x0, 0x4049851}, 0x40080) 16:55:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 16:55:15 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = getpgid(0x0) getpgid(r1) r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/pid_for_children\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280), 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x81, 0x0, 0x2, 0x4, 0x0, 0x7, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000002c0), 0xa}, 0x210, 0x7ff, 0x9, 0x9, 0x8001, 0x6, 0xa9e}, r4, 0xb, r5, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:15 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:15 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x5, 0x418040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'rose0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond_slave_1\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'hsr0\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bond0\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNAPSHOT_S2RAM(r3, 0x330b) 16:55:15 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x5, 0x2) read$snapshot(r1, &(0x7f0000000040)=""/157, 0x9d) 16:55:15 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x2) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x100000000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x7f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x224000) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$SNDCTL_DSP_GETTRIGGER(r3, 0x80045010, &(0x7f0000000080)) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7f) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2c00) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x2, 0x131202) read$snapshot(r0, 0x0, 0x0) 16:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x3) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x12d982) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xd4, 0x4b0d00) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf250b000000a40004801300010062726f6164636173742d6c696e6b00001300010062726f6164636173742d6c696e6b00000c6d078008000300000000001300010062726f6164636173742d6c696e6b00000c00078008000400000001004c0007800800030000000100080001001b000000080003000700000008000300050000000805000001000000080003000100000008000100030000000800040006f6ff00080003005700003f2bf94c1a6a9f"], 0xb8}, 0x1, 0x0, 0x0, 0x804}, 0x4000065) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) bind$802154_dgram(r2, &(0x7f00000001c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000005c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000600)={@private1, 0x0}, &(0x7f0000000680)=0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x88, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) 16:55:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = getpgid(0x0) getpgid(r1) r2 = syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/pid_for_children\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000280), 0x10) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x81, 0x0, 0x2, 0x4, 0x0, 0x7, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000002c0), 0xa}, 0x210, 0x7ff, 0x9, 0x9, 0x8001, 0x6, 0xa9e}, r4, 0xb, r5, 0x8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket(0x6, 0x800, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00', r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', r0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044841}, 0x1) 16:55:16 executing program 4: ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETBLKSIZE(0xffffffffffffffff, 0xc0045004, &(0x7f0000000040)) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x4) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 3: sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) 16:55:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7f) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x2c00) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKBSZGET(r3, 0x80081270, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x105000) read$snapshot(r0, 0x0, 0x0) 16:55:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r1, 0x400c330d, &(0x7f0000000040)={0x3ff, 0x7}) write$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000480), &(0x7f00000004c0)=0x4) syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xec, 0x2000c2) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000080)={0xc358, 0x3ff}) r3 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x1, 0x20000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000140)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r3, 0x80083314, &(0x7f0000000000)) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x7) 16:55:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_NEW_MPATH(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022bbd7000fbdbdf25170000000c009900030000007f00edff09001a0008021100000108000a001a00ffffffffffff04000a001a007f75168b9a069ee2"], 0x44}, 0x1, 0x0, 0x0, 0x24004888}, 0x800) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x400001) 16:55:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xb07, 0x200) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x5e}}}}, [@NL80211_ATTR_SSID={0xb, 0x34, @random="f41e1779afe865"}, @NL80211_ATTR_PMK={0x14, 0xfe, "2431997a2b74a721feed3ebf3d522ced"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x46}, @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280)='devlink\x00', r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff0000000500280000000000080002"], 0x5c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r7, 0xbcc20cd552d630d7, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "012ecae21effbe2fc3e07d14f20ce834"}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x12}]}, 0x30}}, 0x4001) r8 = getpgid(0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00', r9) 16:55:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x280000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x108, r2, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x3e}}}}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x70, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x54, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x400}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x3}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7fffffff}, @NL80211_BAND_2GHZ={0x8, 0x0, 0xfffffffc}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x4}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xb392}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x75}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x2e}, {0x8, 0x0, 0x7fff}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x72}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xffffe27f}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xc0}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x108}, 0x1, 0x0, 0x0, 0x4040000}, 0x8010) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) 16:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x8) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x200000) read$snapshot(r0, 0x0, 0x0) 16:55:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x10001, 0x20100) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x69}, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x400000d) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x890) [ 1580.106538] nla_parse: 8 callbacks suppressed [ 1580.106548] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. 16:55:16 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r2, 0x0, r3}, 0x10) 16:55:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff2178, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffc00}, @map={0x18, 0x7, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0xb6, 0xb, 0x8, 0x2, 0xfffffff8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x4, 0x6, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x33}, @alu={0x4, 0x0, 0x2, 0x4, 0x0, 0x8, 0x8}, @exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1e00, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x6, 0x2, 0x8}, 0x10}, 0x78) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffe, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x8, 0x70bd29, 0x25dfdc02, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xea}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) 16:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xe) 16:55:16 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:16 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff2178, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffc00}, @map={0x18, 0x7, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0xb6, 0xb, 0x8, 0x2, 0xfffffff8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x4, 0x6, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x33}, @alu={0x4, 0x0, 0x2, 0x4, 0x0, 0x8, 0x8}, @exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1e00, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x6, 0x2, 0x8}, 0x10}, 0x78) 16:55:16 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = getpgid(0x0) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x9, 0x22803) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) r3 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/mnt\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r3) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 16:55:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x12, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff2178, 0x0, 0x0, 0x0, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffc00}, @map={0x18, 0x7, 0x1, 0x0, r3}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @generic={0xb6, 0xb, 0x8, 0x2, 0xfffffff8}, @ldst={0x1, 0x3, 0x0, 0x6, 0x4, 0x6, 0x1}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x33}, @alu={0x4, 0x0, 0x2, 0x4, 0x0, 0x8, 0x8}, @exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x1e00, 0x1a, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x4, 0x6, 0x2, 0x8}, 0x10}, 0x78) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x60) 16:55:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x10000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r7) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x8a) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x8330, 0x30, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{0x7cbc, 0x1, [@m_pedit={0x59e8, 0x18, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x58fc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x0, 0x2, 0x7, 0x0, 0x3}, 0x3, 0x5, [{0x7, 0x10001, 0x1, 0x9, 0x520cdb3a, 0x3}]}, [{0x4, 0x1, 0x5, 0x7f, 0x0, 0xa564}, {0x2, 0x3, 0x0, 0xa8, 0x0, 0x2}, {0x7fffffff, 0x90b, 0x4, 0x1, 0x8, 0x3}, {0x8, 0x1, 0xdd7000, 0x3f, 0xa3, 0x545}, {0x0, 0x8, 0xffff3a09}, {0x9, 0x76a, 0x6, 0x0, 0x1, 0x5d}, {0x3, 0x7f, 0x8, 0x101, 0x2, 0x1}, {0x7fff, 0x8, 0x2, 0x1, 0x8, 0x10000}, {0x5, 0x8, 0x4, 0x4, 0x81, 0x5}, {0x200, 0xe, 0xb95, 0x4, 0x3f, 0x20}, {0x5, 0x6, 0x7, 0x1, 0xff, 0xffffffff}, {0x7ff, 0x8001, 0x10000, 0x9, 0x1, 0x1}, {0xfffffffa, 0x3, 0x0, 0x1, 0xffff}, {0x7, 0x2, 0x400, 0xc4f, 0x6, 0x1}, {0x0, 0x9, 0x7, 0x1, 0x800, 0x6}, {0x8, 0x200, 0xffffffff, 0xff, 0x8, 0x20}, {0x3, 0x0, 0x2, 0x3, 0x0, 0x800}, {0xffff, 0x7f, 0x1, 0x4, 0x3, 0x6}, {0x3, 0x4, 0x600000, 0x9, 0x1, 0x9}, {0x10000, 0x1a1, 0xfffffffc, 0x6, 0x1bc, 0x4}, {0x8, 0x344, 0x421, 0x0, 0x20, 0x10000}, {0x5, 0xffffff74, 0x80, 0x5e9, 0x4, 0x7a}, {0x9, 0x5a, 0x2, 0x27ed, 0x20, 0xffff}, {0x7fff, 0x1, 0x3, 0xe00, 0x3}, {0x7ff, 0xffffffff, 0x5e, 0x2, 0x400, 0x1}, {0x0, 0x5, 0xffffff7f, 0xfffffffd, 0x7, 0x3}, {0x40, 0x7fff, 0x80000001, 0x6, 0x0, 0x8001}, {0xffffffff, 0x21e, 0x3f, 0x60f9, 0xffff, 0x7f}, {0x8, 0x4, 0x1, 0x9, 0x7, 0x2}, {0x6, 0x3ff, 0x4, 0x3f, 0x6, 0x8000}, {0x1000, 0x2, 0xfffffffa, 0x7fffffff, 0x7fff, 0x128}, {0x6, 0x3f, 0x5, 0xfffff000, 0x2, 0x1ff}, {0x6, 0x7eef4b42, 0x1ff, 0x7fff, 0xffffffff, 0x7}, {0x3, 0x9, 0x0, 0x8001, 0x3ff, 0x3f}, {0x2, 0xffffffff, 0x0, 0x1f, 0x8da0, 0xec}, {0x4, 0x5, 0x0, 0xd43}, {0x2, 0x6, 0x7, 0xfff, 0x3f, 0x100}, {0xa19, 0x5, 0x6, 0x2, 0x1, 0x6}, {0x7fff, 0x524, 0xfff, 0x5, 0x9, 0x8}, {0x1, 0x5, 0x8, 0x80000000, 0x3, 0x6}, {0x10001, 0x6, 0xc5d4, 0x7, 0xfffff001, 0xaf1}, {0x4, 0x100, 0x9, 0xfffffffe, 0x9c, 0x6}, {0x3, 0x5, 0x1, 0x5, 0xffff, 0x2}, {0x4, 0x0, 0x4, 0x7, 0x9}, {0x4, 0x3, 0x7fff, 0x200, 0x7, 0x100}, {0x0, 0x7fffffff, 0x8efc, 0x9, 0xff, 0xffffff80}, {0x8001, 0xfffffffa, 0xd16d, 0x2, 0x7, 0x6}, {0xffffffcc, 0x1, 0x6, 0xac, 0x2, 0x1}, {0xc5ec, 0x0, 0x6, 0x2e7, 0x3, 0x3}, {0x5, 0x8, 0x7fffffff, 0x7ff, 0x9cf, 0x4}, {0x3, 0x0, 0x8, 0x7ff, 0x6, 0x3}, {0x4, 0x8, 0x0, 0x3, 0xfff, 0x1}, {0xffffffff, 0x2, 0x2, 0xe3a, 0x6, 0x9}, {0x1, 0x400, 0x7f, 0x80000001, 0x8, 0x8}, {0x1200000, 0x61, 0x8000, 0x0, 0x9f, 0x7f}, {0x1, 0x90, 0x6987, 0x5724, 0x10000, 0xadd}, {0x20, 0xffffffff, 0x6, 0x3, 0x5, 0x2}, {0x346, 0xff, 0x57, 0x5, 0x400, 0x52f2}, {0x3, 0x7ff, 0x9, 0x80000001, 0x3f, 0x1}, {0x80, 0xab7, 0x9, 0x0, 0x2, 0x7a}, {0x21, 0x8, 0xafe7, 0x80000001, 0x3, 0x7}, {0x6, 0x1ff, 0x3f, 0x8, 0x5, 0x9}, {0x9, 0xffffff52, 0x7fffffff, 0x47, 0x2, 0xffff8001}, {0x3, 0x1, 0x8, 0x80, 0x7, 0x4}, {0x0, 0x4, 0x5, 0x9, 0x9, 0x800}, {0x5, 0x9, 0x3, 0x0, 0x5, 0x1}, {0x1, 0x7, 0x400, 0x5, 0x0, 0xffff}, {0x3, 0x9, 0x2, 0x0, 0x6, 0x1}, {0x10001, 0x3ff, 0x4, 0x593207dd, 0x1, 0xfff}, {0x1, 0x5, 0xffffffc1, 0x8, 0x302c, 0x5}, {0xfffffff8, 0x6, 0xc4d3, 0x6, 0x2, 0x20}, {0x1ff, 0x1, 0x4, 0x6, 0xa6, 0x1}, {0x5, 0xe4, 0x4, 0x4, 0x2, 0x8001}, {0x8, 0x7fffffff, 0x1, 0x5, 0x2, 0x6}, {0xfffffeff, 0x3, 0xffff7fff, 0x4, 0x420, 0x7}, {0x7fff, 0x5, 0x0, 0x401, 0x2, 0x63}, {0x0, 0x7, 0x3, 0x4, 0x8f, 0x5}, {0x6, 0x0, 0x1, 0x10000, 0x3ff, 0x1f}, {0x7, 0x6, 0x4, 0x4000, 0x1, 0x7}, {0x0, 0x0, 0x80, 0xd0, 0x7fffffff, 0x1}, {0x100, 0xfff, 0x9, 0x0, 0x10001, 0x8001}, {0x5, 0x2, 0x9, 0x8, 0xea2, 0x3700}, {0x2, 0x5, 0x2, 0x8, 0x2, 0x1}, {0x6, 0x0, 0x6, 0x5, 0x1, 0x5}, {0x8001, 0x0, 0x6, 0x100, 0x0, 0x3ff}, {0x8, 0x6, 0x1, 0x400, 0x9, 0x7fff}, {0x7, 0x7, 0x9b3, 0x3f, 0x2, 0xfffffff9}, {0x101, 0x2, 0x4, 0xae, 0x4, 0xb51}, {0x10000, 0x1, 0x3, 0xffffb023}, {0x4, 0x7fffffff, 0x10000, 0x285, 0x3ff, 0x1f}, {0x1, 0xf5e8, 0x5, 0x3, 0x2, 0x1}, {0x9, 0x2, 0x81, 0x7, 0x0, 0x4}, {0x2, 0x1, 0x4, 0xfff, 0x6, 0x80000000}, {0x6, 0x8, 0xbf, 0x1ff, 0x9, 0x3f}, {0x8001, 0x1, 0x2, 0x5, 0x2, 0x88aa}, {0x4, 0x4, 0x5, 0xffff, 0xc906, 0x3}, {0x1, 0x6, 0x7fff, 0xffffff80, 0x3, 0x10000}, {0xdf, 0x400, 0xfff, 0xffff8000, 0x3}, {0x7, 0xe8d, 0x100, 0x2, 0x200, 0x9}, {0x7f, 0x6, 0x2, 0x6, 0x6, 0x7fff}, {0x7, 0x8, 0x3ff, 0x3f, 0xfffffffb, 0x401}, {0x3, 0x642, 0x7ff, 0x100, 0x81, 0x101}, {0x5, 0x6, 0x8, 0xffffffff, 0x8, 0x555e}, {0x200, 0x1, 0xd88, 0x5000, 0x5529}, {0x4280, 0x5, 0x4, 0x100, 0x7}, {0x0, 0x21, 0xd4b, 0x4, 0x7f}, {0x1, 0xa9c, 0x7ff, 0x8000000, 0x6, 0x1}, {0xa372, 0x2, 0xd9, 0x3, 0x5, 0x81}, {0x5, 0x9, 0x6, 0x101, 0x2, 0x20}, {0x1, 0x5, 0x7, 0x8001, 0x3, 0x1}, {0x2, 0x7b, 0x4, 0x5, 0x3, 0xeff}, {0x2403, 0x7fff, 0x1, 0x3, 0x1}, {0x1691, 0x7, 0x3f, 0x81, 0x41, 0x6}, {0x10001, 0x1, 0x8, 0x6, 0x2, 0x8}, {0xd98, 0x1, 0x0, 0x40, 0xd94, 0x8001}, {0x36e, 0x5, 0x10000, 0x35, 0x0, 0x8}, {0x1, 0x6, 0x6, 0x7f, 0x800, 0x10001}, {0x2, 0x8, 0x9, 0x4, 0x3ff, 0x2}, {0x6, 0x1000, 0x8, 0x8, 0x101, 0x1}, {0xffff, 0x7ff, 0x6, 0x1000, 0x5, 0x1000}, {0x694e7312, 0x636, 0xfffffffb, 0x36, 0x6, 0xf8800}, {0x1f, 0x7, 0x9, 0x7fffffff, 0x8000, 0x1ff}, {0x18c, 0x6, 0x800, 0x3, 0x6, 0x6eb}, {0x4, 0x8, 0x6, 0x3f, 0x6, 0x2504}, {0x5, 0x138d, 0x2, 0x20, 0x2, 0x800}, {0x32eb, 0x8, 0x8, 0x8, 0x8001, 0x1}, {0x1, 0x5, 0x4, 0x0, 0x2}, {0x20, 0x200, 0xffff8000, 0x8, 0x3, 0x401}], [{0x4}, {0x5, 0x1}, {0x3}, {}, {0x1, 0x1}, {}, {0x4}, {0x4}, {0x4, 0x1}, {0x1}, {0x1}, {0x7}, {0x4}, {0x5, 0x1}, {}, {0x4}, {}, {0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x6}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x6}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x3c1ff4392374e8f4}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x5}, {0x4}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x5}, {0x6}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x3}, {0x2}, {0x6bf4297968e8783a, 0x1}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2}, {0x2}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x17c, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xe68, 0x2, {{{0x8000, 0x5, 0x4, 0x800, 0x8}, 0xaa, 0x80, [{0x8, 0x4, 0xfffffff8, 0xff, 0x4, 0x80000000}, {0x5, 0x20, 0x40, 0x1, 0x9, 0x8001}, {0x412, 0x330a, 0x5, 0x2, 0x9e}]}, [{0xfffffffa, 0x3, 0x0, 0x1, 0xf4d6, 0xfffffff7}, {0x7, 0x7fffffff, 0x400, 0x8, 0xfffffffe, 0x401}, {0x7cc, 0x71b, 0x80000000, 0x4, 0x6, 0xffffffff}, {0xc530, 0x0, 0x9813, 0x7, 0x2, 0xffffff80}, {0x0, 0x6, 0x317b, 0xd5, 0xfffffc5c, 0x5}, {0x2, 0x600, 0x7fff, 0x6, 0x200, 0x9}, {0x19, 0x2f7, 0xffffffff, 0x7ff, 0x3f, 0x4}, {0x20, 0x3, 0x1, 0x7, 0x17db, 0x68fc}, {0x81, 0x3ff, 0x0, 0x80000000, 0x28b, 0x4}, {0x1, 0x8000, 0x64b, 0x7fffffff, 0x7, 0x1f}, {0x20, 0x9, 0x17, 0x1, 0x0, 0xfffffff8}, {0xffffffff, 0x10000, 0x8, 0x9, 0x3, 0x1}, {0xff, 0x81, 0x4, 0x80000000, 0xfffffff9, 0x2}, {0x80000000, 0x5, 0x10000, 0x4, 0x9c37, 0x7}, {0x3, 0x911, 0x3, 0x400, 0x8001, 0xff}, {0xd18, 0x1, 0x80, 0x1ff, 0x0, 0x7fff}, {0x4, 0x3f, 0xaef, 0x3, 0x100, 0x5}, {0x8, 0xfffe0000, 0xd8, 0x1, 0x18000000, 0xfffffffa}, {0x817, 0x6, 0x8, 0x40, 0x1}, {0x7, 0x401, 0x10001, 0xff, 0x6, 0x1000}, {0xe7, 0x0, 0x9, 0x3, 0x7, 0x400}, {0x1, 0x1, 0x8, 0x80000001, 0x8, 0x8}, {0x1, 0x40, 0x4, 0x7fff, 0x80, 0xfff}, {0x0, 0x1f, 0x3, 0x7, 0x0, 0x80}, {0x81, 0xf7f7, 0x7fff, 0x2, 0x7, 0x200}, {0xbcc8, 0x4, 0x1ce, 0x5, 0x9, 0x1ff}, {0x5, 0x1, 0xe1, 0xff3, 0x8, 0x1f}, {0x5, 0x80, 0x6, 0x0, 0x1, 0x5}, {0x0, 0x5, 0x5, 0x7fffffff, 0xcd27, 0xa9}, {0x9, 0x7f, 0x9, 0x6, 0x5, 0x6445}, {0x7f, 0x3, 0xa6c, 0x0, 0x2, 0x7}, {0x6c5, 0x1000, 0x3, 0x80000, 0x10000, 0x6}, {0x5a07, 0x6, 0xff, 0x10001, 0x8, 0x9}, {0x6, 0x81, 0x6, 0x0, 0x8000, 0x7}, {0xffff, 0x9, 0x40, 0x101, 0x8, 0x1}, {0x200, 0x5, 0xfffffeff, 0x7fffffff, 0x10001, 0x8}, {0x7, 0x5, 0x7, 0x101, 0x7, 0xa8}, {0x35, 0x10001, 0xfffffffa, 0x47, 0x2, 0x15d1}, {0x8, 0x6, 0x7fff, 0x5, 0x5, 0x101}, {0x2, 0x7, 0x87, 0x6, 0x5}, {0x9, 0x3f, 0x4a6d, 0xffff8000, 0x40, 0x3}, {0x4c8, 0x1ff, 0x4, 0x0, 0x3, 0x7}, {0x1, 0x400, 0x8000, 0x3ff8000, 0x8, 0xfffff228}, {0x6, 0x101, 0x200, 0x5, 0x6, 0x5}, {0x8000, 0x5, 0x100, 0x0, 0x1, 0x4}, {0x1, 0x9, 0x3, 0x0, 0x100, 0x422}, {0x200, 0x5, 0xff1, 0xffffffff, 0x6, 0x2b3}, {0x7, 0x6, 0x3, 0x4, 0x8001, 0xffffffe1}, {0xb, 0x1, 0x5, 0x81, 0x0, 0x400}, {0x3ff, 0x40, 0x1000, 0x0, 0x2, 0x5}, {0x0, 0x8000, 0x1, 0x4, 0x8, 0x8}, {0xeb, 0x3, 0x7, 0xfffffff7, 0x166cb1cf, 0x635}, {0x81, 0x77, 0x6f5, 0x9ed, 0x20, 0x100}, {0x0, 0x4, 0xffffa00b, 0x1f8, 0x0, 0xffff0001}, {0x1, 0x8000, 0x4, 0x3, 0x2, 0x2}, {0xffff, 0x1a, 0x40, 0x40, 0xffffff8e, 0x100}, {0xffff, 0x400, 0x40, 0x2, 0xac6, 0x7fffffff}, {0x400, 0x6a0b, 0x4, 0x3, 0x3, 0x3f}, {0xf0000000, 0x1, 0x0, 0x2, 0x800, 0x8}, {0x9, 0x80, 0x7f, 0x7fffffff, 0x6ab3, 0x27}, {0x6, 0x2, 0x0, 0x0, 0x3, 0x5}, {0x8, 0x2000, 0x2, 0x9, 0xa28, 0xffffff00}, {0x8000, 0x8, 0x6644, 0x7, 0x70, 0x100}, {0x0, 0xc282, 0x800, 0x3fd5, 0x1, 0x800}, {0x9, 0x7, 0x0, 0x1, 0x1, 0x100}, {0xffff, 0x9, 0x7af063d7, 0x1ff, 0x3, 0xc16}, {0x5, 0xffffc2a9, 0x2, 0x4, 0x1, 0x6}, {0x5, 0xfffffffa, 0x10000, 0x4, 0x7, 0x3}, {0x5, 0x1b69d6e7, 0xff, 0xea6, 0xf8e5}, {0xb40d, 0x0, 0x7, 0x0, 0x268, 0x4}, {0x1672333b, 0x9, 0x1f8, 0xa932, 0x0, 0x2}, {0x4, 0x1, 0x1, 0x3, 0x6, 0x6}, {0x2734, 0x4, 0x4, 0x8275, 0x4, 0x3}, {0x4, 0x9190, 0x20, 0x80}, {0x1, 0x6, 0x7fff, 0x2, 0x6fb24b09}, {0x5, 0x5, 0x1, 0x0, 0x4}, {0x9, 0x8, 0x1, 0x163, 0xca2, 0x9}, {0x40, 0x0, 0x4, 0x8, 0xffffffff, 0x5}, {0x8000, 0x20, 0x1, 0x81, 0x50, 0x400}, {0x10000, 0x6, 0x0, 0x3, 0x7, 0x6}, {0x80000000, 0x9, 0x9, 0x6, 0x4fcb, 0x2}, {0x10001, 0x401, 0x2, 0x5, 0xb524, 0x80}, {0xff, 0x7ff, 0x400, 0x9, 0x89d1, 0xfffffffa}, {0x100, 0x2, 0x6, 0x3, 0x80000000, 0x7}, {0x9, 0x0, 0x3, 0xfffffffc, 0x80000000, 0x598}, {0x17, 0x8, 0x1f, 0xffffffff, 0xa14, 0x40}, {0x573, 0x9, 0x0, 0x8, 0x2, 0xfffff000}, {0x0, 0x8000, 0x6, 0x6, 0x1, 0x1f}, {0x7fff, 0x7f, 0x8, 0x7ff, 0xfffffffa, 0x6}, {0xb4, 0xfffffffe, 0x937, 0x2, 0x3, 0x4}, {0x38e9, 0x4, 0x8000, 0x9, 0x2, 0x10001}, {0x62be, 0x10001, 0x4, 0x1000, 0x5, 0x1}, {0x5bd, 0x800, 0xffffffff, 0x401, 0x4, 0x800}, {0x6, 0x5, 0x2, 0x1, 0x8, 0x2}, {0x200, 0x7ff, 0x10000, 0x189f, 0x8fb, 0x10001}, {0x1, 0x401, 0xc82, 0x10000, 0x4, 0x7}, {0x4, 0xff, 0x645d7737, 0x9, 0x80000001, 0x3}, {0x4, 0x57c30f7, 0xffff, 0x7fffffff, 0x99, 0x5}, {0x80, 0xe4, 0x4, 0x9, 0x200, 0xa9a}, {0x31, 0x0, 0xfffffff9, 0x5, 0x0, 0x1000}, {0x0, 0xc79, 0x9, 0x7fffffff, 0x1000, 0xb90e}, {0x7176, 0x3, 0x9b4b, 0x4, 0x9, 0x5}, {0x9ae0, 0x1, 0x10000, 0x6, 0x9, 0x4}, {0x175, 0x0, 0x8, 0x7, 0x1000, 0x7fffffff}, {0x8001, 0xfff, 0x4, 0x7, 0x1f, 0x3}, {0x7fff, 0x80000000, 0x2000, 0x7fffffff, 0x4, 0x15}, {0xfe, 0x1f, 0x7a0cee54, 0x7, 0x3, 0x8}, {0x17, 0x81, 0x8, 0x7, 0x1, 0x1000}, {0x0, 0x8001, 0x1, 0x3, 0xffffffff, 0x5}, {0x50a, 0x700000, 0x4, 0x6ae, 0x3, 0x8}, {0x5, 0x1ff, 0x81, 0x0, 0x7, 0x9f41}, {0xabf, 0x7, 0x1, 0x3, 0x3, 0x38000000}, {0x1000, 0x9, 0x14369493, 0x7, 0x0, 0xfffffffe}, {0x9, 0x2, 0x1, 0x200, 0x1, 0x3f}, {0x75b, 0x52800, 0x364a, 0x4, 0xe4b, 0x3f0000}, {0x7, 0x13, 0x605cfc25, 0x2, 0x0, 0x9}, {0xfffffffa, 0xcf70, 0x7, 0x3, 0x0, 0x6}, {0x5, 0x5, 0x8, 0x9144, 0x2, 0x3554c164}, {0x1, 0x7, 0x2, 0x1, 0x2}, {0x3f, 0x8, 0x1, 0x1ff, 0x0, 0xc0}, {0x2e1, 0x4, 0x9, 0x5b, 0x77, 0x1800}, {0x2, 0x7, 0x6df, 0x8, 0x1, 0xfffffff9}, {0x1000, 0x8, 0x10fd94fd, 0x0, 0x6, 0x762}, {0x9, 0x1, 0x401, 0x7fff, 0x1, 0x1}, {0x3, 0xffff, 0x3, 0x5, 0x8, 0x1ff}, {0xa00, 0xc5, 0x4, 0x1200000, 0x2, 0x401}, {0x6, 0x1, 0x4, 0x9, 0x2, 0x2}, {0x2, 0x80000001, 0xa47c, 0x8, 0x2, 0xfd9a}], [{0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0xe2c20e2dff37561d, 0x1}, {0x2}, {0x6}, {0x1, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x7}, {0x3}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {0x1, 0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x4}, {0x4}, {0x39581986f2065384}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x1, 0x1}, {0x2}, {0xa, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80, 0xcbb, 0x8, 0x10001, 0x1f}, 0x64, 0x17, [{0x80000000, 0x1, 0xffffffff, 0x5, 0x0, 0x7}, {0x1, 0x2, 0xb3f, 0x0, 0x5, 0x4}]}, [{0x2, 0x20, 0x400, 0x800, 0x101, 0x7ff}, {0x1ff, 0x6, 0x80, 0x7fffffff, 0xc0000000, 0x6}, {0x5, 0x7, 0x3, 0x4b, 0x0, 0xfffffffc}, {0x80, 0x0, 0x3, 0x0, 0xffffffc0, 0x6}, {0x4, 0x10001, 0x7, 0x7, 0xff, 0x7}, {0x6, 0x4, 0x80000001, 0x0, 0x5c, 0x4}, {0x8, 0x1, 0x7, 0x1, 0x7, 0x7}, {0xffffff48, 0xfffffffc, 0x4, 0x2, 0x7f, 0x313b}, {0x2, 0x0, 0x0, 0x1ff, 0x2, 0x36b6}, {0x9, 0x6f5, 0x9, 0x28, 0x10001, 0x2}, {0x3f, 0x6068, 0x8, 0xffffffff, 0x40000000, 0xfffffffe}, {0x8, 0x1, 0xed, 0x4, 0x2, 0xade}, {0xb568, 0x0, 0x7fff, 0x401, 0x2bb458a3, 0x7fffffff}, {0xc6, 0x9, 0x9, 0x1, 0xfffffff9, 0x7}, {0x10001, 0x689, 0xffffff29, 0x3, 0x9, 0x1}, {0x266a, 0x2, 0x101, 0x4, 0xfffffffc, 0x6}, {0x3edc, 0x3f, 0xff, 0x1, 0x40, 0x8}, {0x5, 0x8, 0xa3, 0x6, 0x8, 0xf4f}, {0x5fe9, 0x8000, 0x400, 0x6, 0x100, 0x1000}, {0x3b80, 0x4, 0x1000, 0x670, 0x200, 0x1}, {0x1, 0x5, 0x2, 0x1ff, 0x4, 0x2}, {0x81, 0x3, 0x6ddff381, 0x8, 0x1, 0x7ff}, {0x7fff, 0x200, 0x4, 0xb3, 0xffff, 0x20000000}, {0x9, 0xc7, 0x8, 0x73c2f00f, 0x2, 0xc2}, {0xfffffffc, 0x6, 0x8001, 0x70e, 0x8000, 0x3b}, {0x7, 0x4, 0x3ff, 0x100, 0xb06, 0x400}, {0x2, 0x1, 0x49d, 0xde, 0x0, 0x2}, {0x800, 0x9, 0x7fffffff, 0x7f, 0xfabf, 0x5}, {0x82, 0x2, 0x101, 0x1, 0x10, 0x1}, {0x100, 0xaa24, 0xbb5, 0x10000, 0x6}, {0x40, 0x1, 0x5, 0x1, 0x8, 0x8}, {0x5, 0x7, 0x984e, 0x6, 0x1, 0x4}, {0x8, 0x1, 0xd2a, 0x9, 0xfffffbff, 0x6}, {0x2, 0x20, 0x4, 0x9, 0x469277d1, 0x2}, {0xe11, 0x2f51, 0xffff, 0x9, 0xfffffff7, 0x401}, {0x0, 0xc3, 0x10000, 0xfff, 0x4}, {0x8, 0x9, 0x7fff, 0x7, 0x1, 0xbc}, {0xfffffc01, 0x5, 0x100, 0x9, 0x100, 0x80}, {0x4bee848e, 0x5, 0x3ff, 0xfffffff8, 0x101, 0x8}, {0x4, 0x7, 0x3, 0xdd0, 0xd8, 0x8}, {0x9, 0x9, 0xff, 0x6, 0x8, 0xbd4}, {0xffffffff, 0x0, 0xb2, 0x49, 0x101, 0x5}, {0x400000, 0x7fffffff, 0x4, 0x5, 0x2, 0x100}, {0x1, 0x10001, 0x4, 0x80000000, 0x10001, 0x2}, {0xff, 0x8, 0x0, 0x8001, 0xac5, 0xffffffff}, {0xffffffe0, 0x8, 0x3, 0x6, 0x7, 0x7}, {0x7, 0x10000, 0x17b, 0x20, 0x9}, {0x2dc, 0x8, 0x96, 0x4, 0x4, 0x1}, {0x4, 0x7, 0x7, 0x101, 0x5, 0xffff}, {0x6, 0x101, 0x1000, 0x1, 0x2, 0x6}, {0x8, 0x6, 0x4, 0x8, 0x80000001, 0xffe0000}, {0x10000, 0xd88, 0x6, 0x68ed, 0x3}, {0xfffffffc, 0x80000001, 0x2, 0x9, 0x5, 0x6}, {0x3, 0x5, 0x800, 0x0, 0x3, 0x5}, {0x9, 0x9, 0x6, 0x7ff, 0xcf, 0xfffffeff}, {0x80000001, 0xb8b, 0x3, 0x2, 0x5, 0x3}, {0x9, 0x400, 0xae, 0x0, 0x3b5, 0x40}, {0x80000000, 0x3, 0x1995, 0x93, 0x8000, 0x4f0}, {0x1ff, 0x1c, 0x0, 0x1, 0x6, 0x80}, {0x8, 0x1, 0x9, 0x9d0d, 0x1, 0x3ff}, {0x2, 0x8000, 0x101, 0x1f, 0x1fb640, 0xc51}, {0xfad191b, 0x52, 0x1ff, 0x8, 0x0, 0x5}, {0x800, 0xffffffff, 0x5, 0x2, 0x7, 0x6}, {0x3, 0x8, 0x2, 0x283, 0x1, 0xa93c}, {0x2, 0x100, 0x8, 0x10000, 0x8, 0x1}, {0x1f, 0x7fe, 0x92, 0x0, 0x3e1124bf, 0x5}, {0x993, 0x1, 0x1000, 0x6, 0x1bb, 0x6}, {0x6d5, 0xfd68f9d, 0xfff, 0x8000, 0x9, 0xf3e9}, {0x0, 0xe, 0x6, 0x0, 0x3, 0x1f}, {0x101, 0x10001, 0x2, 0x2, 0x1c, 0x5}, {0x401, 0x101, 0x1000, 0x8, 0x80, 0x8}, {0x20, 0x6, 0xffffff80, 0x100, 0x6, 0xf8c}, {0x3ff, 0xfff, 0x5, 0x7, 0x2, 0xb88d}, {0xfffffffa, 0x7, 0x7, 0x2, 0x7fff, 0xffffffff}, {0x800, 0xaa, 0xff, 0x200, 0x7, 0x400}, {0x5, 0x8, 0x1, 0x6, 0x400, 0x9}, {0x3c36, 0x64, 0x67e, 0xad, 0xa45e}, {0x200, 0xfffffbff, 0x2, 0x7ed, 0x7, 0x5}, {0x7, 0x20, 0x3f, 0x20000, 0x94b, 0x1}, {0x81, 0xffff, 0xdb3, 0x0, 0xfc00, 0x3ff}, {0x3, 0x1f, 0x9, 0x79e, 0x1f, 0xffffff73}, {0x3, 0x7, 0x7, 0x1, 0x8927, 0x1}, {0x4, 0xfffffffa, 0x5, 0x0, 0x5a1, 0x3f}, {0x4, 0x0, 0xdc04, 0x1, 0x9, 0x2}, {0xffffffff, 0x7fffffff, 0x40, 0x383c2568, 0x3ff, 0x2}, {0x80000000, 0x6, 0x8, 0x1, 0x7f, 0x7ff}, {0x7fff, 0x1ff, 0xffffffff, 0x5, 0x0, 0x5}, {0x1f, 0xb4d2, 0x8001, 0x8, 0xa200, 0x400}, {0x1, 0x699, 0x7, 0x6, 0x2, 0x4}, {0x7fff, 0x0, 0x10000, 0x71, 0x7fff, 0x4}, {0x9, 0x20, 0xffffffff, 0x993, 0x7, 0x2}, {0xffffffff, 0xdee, 0x1, 0x3360, 0x8001, 0x1}, {0x0, 0x790, 0x3, 0x8, 0x6, 0x7fff}, {0x4, 0x800, 0x8001, 0x5, 0x0, 0x9}, {0xffff, 0x6, 0x2, 0x0, 0x88, 0x400}, {0x5, 0x6, 0xf, 0x200, 0x0, 0x7f}, {0x20, 0xffffffff, 0xa3, 0x6da8aae3, 0x1, 0x3}, {0x7a0, 0x7, 0x1d4, 0x7fff, 0x1, 0x4}, {0x2, 0x8000, 0x0, 0x2, 0x6, 0x2}, {0x7fff, 0x3ff, 0x3, 0x7fff, 0x5, 0x9}, {0x15d8, 0x7, 0x5, 0x10000, 0x5, 0x2}, {0x10, 0x4, 0x4, 0x10000, 0x2, 0x612}, {0x7, 0x9ab7, 0x7fffffff, 0x1, 0xff, 0x6466}, {0x7f, 0x5c, 0x20, 0x2, 0x4, 0x80000001}, {0x6, 0x1, 0xfff, 0xffff, 0x10001, 0x1}, {0xffff, 0x3f, 0x2, 0x8, 0x5, 0x4}, {0x6, 0x1, 0xe32, 0x5, 0x9, 0x3f}, {0xffffffff, 0x80000000, 0x4, 0x5, 0x4, 0x401}, {0xffff8000, 0x5, 0x9, 0x7fffffff, 0xfffffffe, 0x1}, {0x1, 0x8, 0x10000, 0x6, 0x1, 0x3}, {0x7ff, 0x5, 0x6d, 0xde1b, 0x2, 0x8}, {0x5, 0x5, 0x2, 0x8, 0x3, 0x6}, {0x1ff, 0x9, 0x1f, 0x0, 0x4, 0xffff}, {0x44a, 0x1, 0x6, 0xffffff65, 0x0, 0x8}, {0xffffffff, 0xc4, 0x8c, 0x7fffffff, 0x7ff}, {0x800, 0xc0000000, 0x1, 0x6, 0xffff, 0x1}, {0xff, 0x7243461, 0x1, 0x4, 0x7c8d, 0x3}, {0x80000001, 0x7, 0x1, 0x10001, 0x5, 0x80000000}, {0xa99e, 0x9, 0x3, 0x7, 0xffffffff, 0x3}, {0x1000, 0xa91, 0xffffe3d5, 0x3f, 0x9, 0x5}, {0x89, 0x0, 0x7, 0xfff, 0x101, 0x7}, {0x1af, 0x5, 0x4, 0x1ff, 0x2, 0x7}, {0x6, 0x7fff80, 0x0, 0x2, 0x1000, 0x8}, {0x0, 0xfff, 0x9, 0x80, 0xa2, 0x3}, {0x4, 0x1, 0x3, 0x17b1, 0x3, 0xb92e}, {0x5, 0x101, 0x1, 0x40000000, 0xa, 0xff}, {0x800, 0x4, 0x546b, 0x6, 0x67, 0x7f}, {0x3b69, 0xffff0000, 0x6, 0x0, 0x8, 0x3}], [{0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x4}, {0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x2, 0x8c7b373a7bb31ad1}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x4, 0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x4}, {0x3}, {0x7, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0xa83a0cd0d525272}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x2}, {0x7, 0x1}, {0x0, 0x1}, {}, {0x3}, {}, {0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x2}, {0x3}, {0x4}, {}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x3}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0xb2b3b199bb2af097}, {0x1}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {}, {}, {0x163e40c114b37bcd}, {0x3, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0xc4, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS={0xeb0, 0x2, {{{0x2, 0x6, 0xc8fd9672ce7e5bf9, 0x1, 0x1ff}, 0x8, 0x3f, [{0xe8a9, 0xdd0, 0x1, 0x7c, 0xfb, 0x6}, {0xfffffffd, 0x5, 0x0, 0x9ab, 0x4, 0x6}, {0x1ff, 0xffff, 0x100, 0x4, 0x7, 0x4}, {0x7, 0x3, 0x6, 0x33, 0x48, 0x80000001}, {0x7, 0x400, 0x81, 0x7, 0x1, 0xc4c}, {0xc5040000, 0x5, 0x6, 0x9, 0xffffffc1, 0x9}]}, [{0x9, 0x2, 0x2, 0xffffffff, 0xffffff01, 0x8}, {0x0, 0x7, 0x0, 0x81, 0x4, 0x401}, {0x2, 0x0, 0x3, 0x3f, 0xff, 0x3}, {0x5, 0xb32c, 0x7, 0x7f, 0x35628bcd, 0xed}, {0x1e9, 0x1ff, 0x6dda, 0x400, 0xe04, 0x7fff}, {0x4, 0xaf7b, 0x1, 0xffffff72, 0x8, 0x9}, {0x10000, 0x2000, 0x0, 0x8, 0xbd5e, 0x3}, {0x9, 0x7, 0x7543c912, 0x101, 0x7ff0000, 0xfff}, {0x400, 0x4, 0x893b, 0x306f, 0xfff, 0x15}, {0x9cf5, 0xe44, 0x7, 0x2, 0x1, 0x5}, {0x612, 0x89d, 0x1, 0x9, 0x2}, {0xfffffff8, 0x2, 0x9, 0x1, 0x7, 0x3823c24d}, {0x8, 0x9, 0x1ff, 0x7ff, 0x5, 0x8}, {0x1400, 0x0, 0x3, 0x5, 0x3341, 0x4}, {0x82, 0x4, 0x6, 0x80, 0x8000, 0x339}, {0x3ff, 0x1, 0xffffffff, 0x9, 0xeef6, 0x5}, {0x1, 0x7, 0x80000000, 0x9, 0x8, 0x9}, {0xfffff16d, 0x9, 0x2, 0x8, 0x0, 0x1c9}, {0x4d, 0x2, 0x0, 0x51, 0x53b53606, 0x2}, {0xcd58, 0x7, 0x3ff, 0x7, 0x79a, 0x4bf}, {0x6, 0x8000, 0x79b46af4, 0x1, 0xa0b, 0x5}, {0x0, 0x1, 0x7, 0x7, 0x10000, 0x3}, {0xfff, 0x75d, 0x6, 0x3, 0x3, 0x8}, {0x0, 0x82f, 0x5, 0x6, 0x80}, {0x90fb, 0x1f, 0x2, 0x92, 0x400, 0x4}, {0x800, 0xa61, 0x10001, 0xffffff7d, 0x400}, {0x1ff, 0x1, 0x4, 0x24d3abdf, 0x8d, 0x7}, {0x1, 0x3, 0xfffffff8, 0x9b6, 0x1000, 0x80}, {0x2, 0x400, 0x101, 0x400, 0x40, 0x2}, {0x40, 0x8, 0x7fffffff, 0x100, 0x6, 0x200}, {0x3, 0x7ff, 0x0, 0x3f, 0x0, 0x80000000}, {0xad61, 0x6, 0x7, 0x5, 0x81, 0x3}, {0x7ff, 0x4, 0x4626, 0x2, 0x9, 0x3f}, {0x7ff, 0x4, 0x10001, 0x5, 0x4, 0x7f}, {0x2, 0x3, 0x4, 0x7f, 0xffffffff, 0x7ff}, {0x8, 0x2, 0x8001, 0xffffff01, 0x0, 0x3}, {0x4, 0x9, 0x0, 0xfffffff9, 0x81, 0x4}, {0x5, 0x1000, 0x0, 0x80, 0x766b, 0x9}, {0x0, 0x7, 0x2, 0xe0000000, 0x0, 0x80000000}, {0x80000001, 0x1000, 0xffff, 0x3d5, 0xffff, 0x9}, {0x100, 0x5, 0x1, 0x80, 0x1f, 0x461417e3}, {0x7, 0x8, 0x400, 0x3ff, 0x1, 0x6}, {0x101, 0x1, 0xfffffbff, 0x53, 0x100, 0x2}, {0x100, 0x5e2e, 0x7448bdfe, 0x7, 0x6, 0x3}, {0x1, 0x1, 0x3, 0x6c76, 0x9, 0x28}, {0x6, 0x6, 0x3, 0x10001, 0x8, 0x7}, {0x8, 0x1000, 0x7, 0xfcb, 0x1000, 0x6}, {0xb1, 0x3, 0x5, 0x9, 0x7, 0x4}, {0x3f, 0x800, 0x200, 0xad, 0x5, 0x3}, {0x623, 0x9, 0x97, 0x3, 0x5, 0x2}, {0x5, 0x3, 0x3432, 0x0, 0x48, 0xe394}, {0x7f, 0x1, 0x7, 0x77, 0xffffffff, 0x7fff}, {0x9, 0x4, 0x0, 0x80, 0x0, 0xfffffc42}, {0x6d, 0x1194, 0xffff362c, 0x3, 0x3, 0xb01}, {0x0, 0x7, 0x4, 0x1, 0x5, 0x80}, {0x0, 0xff, 0x3, 0x26, 0x5, 0x2}, {0x9, 0x9, 0x413, 0x7, 0x2, 0x400}, {0x1, 0x4, 0x4, 0x629c, 0xcb84}, {0x4, 0x5, 0x0, 0x7, 0xa1, 0x37d}, {0x532, 0x2, 0x20, 0x0, 0xffffffff, 0x2}, {0x3, 0x2, 0x5, 0x1, 0x800, 0x8001}, {0x2, 0x2, 0x5432, 0x100000, 0x401, 0x8}, {0x7, 0x0, 0x8, 0x9a8, 0x2e, 0x9}, {0x10000, 0x57bcbb4, 0xc50, 0x0, 0x1, 0x6}, {0x8001, 0x3409, 0x1, 0xa9, 0x3b8, 0x3ff}, {0x5, 0x2, 0x80000001, 0x6, 0x1ff, 0x7}, {0x8, 0x7, 0x8, 0x2, 0x1, 0x68a0}, {0x893f, 0x9, 0x0, 0x1000, 0x6, 0x1}, {0x9, 0x0, 0x10000, 0x2, 0x2, 0x2}, {0x1, 0x9, 0x7fff, 0x5, 0x3, 0x9}, {0x9, 0x2, 0x1, 0x0, 0x72, 0x3}, {0x28c7, 0x6, 0x8, 0x5, 0x400, 0x3}, {0x100, 0x6, 0x7fffffff, 0x5, 0xfffffffb, 0xfffffff8}, {0xd8, 0xffffff64, 0x4, 0x6d, 0x800, 0x6b}, {0x7, 0x6d7, 0x2, 0x700000, 0x800, 0xfffffffe}, {0x6e, 0x9, 0x11, 0x7f, 0x2, 0x4}, {0x5, 0x1, 0x2, 0x6, 0x9, 0x5}, {0x2, 0x0, 0xfff, 0x1f, 0x203, 0x6}, {0x200, 0x4, 0x3, 0x7, 0x5, 0x8}, {0x3d6, 0x0, 0x2, 0xfffffff7, 0x0, 0x10000}, {0x80000000, 0x1, 0x96e, 0x4, 0xed4, 0xa2}, {0x431, 0x3ff, 0xffffa6c6, 0xf431, 0x858, 0x2}, {0x40, 0x55, 0x20, 0x2, 0x9, 0x81}, {0x18b1, 0x4, 0x1, 0x7, 0x7, 0x1000}, {0x1, 0x9, 0x94, 0xf8000, 0x80000001, 0x7088038d}, {0x3, 0x5, 0x10001, 0x1, 0x0, 0x8f}, {0x5, 0x2, 0x5, 0xee8f, 0x4, 0x8000}, {0x7, 0x5, 0x2, 0x7fff, 0x4, 0x9}, {0x1f, 0x6, 0x6, 0x8, 0x7ff, 0x1f}, {0x1, 0x80000001, 0xf8b7, 0x3ff, 0x101, 0x4f88}, {0x5, 0x81, 0x7fff, 0x4, 0x1, 0x5}, {0xe, 0x6, 0x6, 0x3, 0x7fffffff, 0x3ff}, {0xfffffffd, 0x7d3, 0x8a, 0xffffff80, 0x3, 0x116410}, {0x7fff, 0x5, 0x1, 0x8, 0x800}, {0xfffffffd, 0xde, 0xfc000000, 0xff, 0x5, 0x80000001}, {0x7, 0xfffffffa, 0x7, 0x80, 0x6, 0x7f}, {0x1f, 0x41c, 0x7ff, 0x0, 0x0, 0x9}, {0x0, 0x6, 0x3, 0x8, 0x7, 0x2}, {0x6, 0x40, 0x8000, 0x4, 0x3ff, 0x5}, {0x535f375e, 0x8, 0x0, 0x100, 0x101, 0xb3dc}, {0x64e8, 0x2, 0x9, 0xc4, 0x7fffffff, 0x2}, {0x8000, 0x2dd, 0x7, 0x4, 0x0, 0xffffffff}, {0x4, 0x2, 0x101, 0x401, 0x80000001, 0xffff0000}, {0x5, 0x8, 0x7, 0x1000, 0x2f, 0xcc}, {0x8, 0x0, 0x9, 0x7, 0x2de, 0x3}, {0xf3, 0x4, 0xca59, 0x1, 0x6, 0x1}, {0x0, 0x5, 0xfff, 0x8000, 0x1, 0x7}, {0x8, 0xca, 0xc000, 0xe6, 0x101, 0x128e9784}, {0x7, 0x2, 0x8, 0x1f, 0xdf, 0x1aaa1ca}, {0x3, 0x8, 0x80, 0x7f, 0xc19, 0x6}, {0x10002000, 0x8001, 0x5, 0x2, 0x3ff, 0xfffffffd}, {0x4, 0x29c9, 0xffff, 0x8, 0x10000, 0x1}, {0x9, 0x101, 0xfffff30b, 0xd483, 0x1ff, 0x9}, {0x6, 0x2, 0x9, 0x2, 0x3ff, 0x2000}, {0x0, 0x5, 0xd6, 0x8, 0x4, 0x5}, {0x0, 0x800, 0x0, 0x9, 0x40, 0x1ff}, {0x80, 0x10000, 0x6, 0x7ff, 0x0, 0x5}, {0x400, 0xffffffff, 0x8, 0xf6, 0x10000, 0x5}, {0xe6, 0xffff, 0xffff, 0x101, 0x0, 0x3}, {0x4, 0x8, 0xeab, 0x296, 0x9, 0xb1e}, {0x4, 0x4, 0x1, 0x8, 0x9, 0x55}, {0x8, 0x300000, 0x8, 0x1000, 0x1042, 0x8}, {0x7ff, 0x250d, 0x1ff, 0x3, 0x9, 0x7}, {0x80000000, 0x5e, 0x9, 0x1a6, 0x1, 0xbc8f}, {0x3056e504, 0x1, 0x8001, 0xd865, 0x7, 0xfffffffe}, {0x5, 0x4, 0x3ff, 0x10000, 0xd2a, 0xc89}, {0xffff, 0x7, 0x8, 0x14cc, 0xfffffff9, 0x100}, {0x8000, 0x8000, 0x96f, 0xffffffff, 0xfffffffa, 0xba75}], [{0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x2}, {0x5, 0x3ec513160690e14a}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {}, {}, {0x2, 0x1}, {0x3}, {}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x5}, {0x8dd67929bcc661b0}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0x5}, {0x6}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x7}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x4}, {0x2, 0xb53b4d5be586c7bb}, {}, {0x2}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x9494a21b3ba5ae4b}, {0x5, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7}, {0x3}, {}, {0x4, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x1}, {0x5}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}], 0x1}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x6, 0x9, 0xffffffffffffffff, 0x3, 0x20}, 0x1, 0x3, [{0x6, 0x7, 0x200, 0x0, 0x9, 0x3}, {0x74d, 0x1, 0x8565, 0xfff, 0x8421, 0x8d}, {0x6, 0xad, 0x80000000, 0x5, 0x57, 0x1}, {0x0, 0xfffffff8, 0x6, 0x3dc, 0x7f, 0x5d3}]}, [{0x4, 0x1000, 0x10001, 0xb651, 0xe, 0xa1}, {0x3, 0x61, 0x0, 0xeef, 0x0, 0x2}, {0x485, 0xb51, 0x40, 0x7fffffff, 0x5171fe74, 0x81}, {0x0, 0xc5, 0x9, 0x7fff, 0x0, 0x1}, {0x4, 0x7, 0xf141, 0x9, 0x10000, 0x10001}, {0x10000, 0x3, 0x5, 0x80000000, 0x1, 0x5}, {0x80, 0x4, 0xffffffff, 0x5, 0x4, 0xe44}, {0x7f, 0x10001, 0x9, 0x3f, 0x5, 0x7ba36b66}, {0x200, 0x1, 0xfffffffe, 0x3, 0xe7de}, {0x5b2, 0x2, 0x73, 0xa2014cdf, 0x42, 0x8000}, {0x7, 0x3f, 0x0, 0xffffffff, 0x8, 0x5}, {0x6, 0x3, 0x2, 0x401, 0x947, 0xf3}, {0x7fffffff, 0x4, 0x5, 0x6, 0x40, 0xf007}, {0x401, 0x6, 0x5, 0xbf2, 0x10000, 0x10000}, {0x3, 0x7, 0x2, 0xffffffff, 0x5, 0x2295}, {0x5, 0x0, 0x9, 0x8, 0x10001, 0x7fffffff}, {0x7, 0x8ad, 0x80000001, 0x3, 0x6}, {0x2, 0x9, 0x2, 0x89fc, 0x10df, 0x2}, {0x4, 0x2, 0x8, 0x20, 0x8c1, 0x1}, {0x1, 0x1ff, 0x1, 0x80000000, 0xf67b, 0xffff}, {0x1, 0xd354, 0x1, 0x8, 0x7f, 0x2}, {0xff, 0x200, 0x80000000, 0x0, 0x76, 0xb68a}, {0x9, 0xfffffffb, 0x40, 0x367, 0x1}, {0x100, 0x7f, 0x100, 0x58, 0x26, 0xb5}, {0x4, 0x7, 0xe6, 0xffffffff, 0x5b, 0x80}, {0xbc, 0x1, 0xffff7fff, 0xfffffffa, 0x1, 0x5}, {0x3, 0x7fffffff, 0x1ff, 0x80000000, 0xfffffff8, 0x6208cf5f}, {0xffffffff, 0x0, 0x7, 0xffffffff, 0x9, 0x800}, {0x0, 0x2, 0x5, 0x6, 0x20, 0x6}, {0x8, 0x7, 0x6, 0x8, 0x1, 0x80000000}, {0x8000, 0x2, 0x400, 0x9, 0x0, 0x2}, {0x80000001, 0x5, 0x2, 0x800, 0x4, 0x42}, {0xfffffff8, 0xff, 0x1ff, 0x25, 0x6ae2, 0x9}, {0x4, 0xffff7fff, 0x0, 0x2, 0x0, 0x7}, {0x2, 0x5, 0xb868, 0x10001, 0x401, 0x9}, {0x9, 0x2, 0x800, 0x1, 0x9, 0x33e}, {0x3, 0x7fff800, 0x0, 0xd7, 0x78, 0x2}, {0x8, 0x6, 0x7, 0x477b, 0x80000000, 0x200}, {0x8, 0x1, 0x4d, 0x20, 0x0, 0x9}, {0x5, 0x80, 0x0, 0x2, 0xb4, 0x2}, {0x7fff, 0x2, 0x1, 0x2, 0xfffffff8, 0x1}, {0x42, 0x26c, 0x9, 0x8001, 0xd4, 0x96}, {0x33d369e8, 0x8, 0x4, 0x7, 0x1}, {0x7ff, 0xffffffff, 0x10000, 0x101, 0x7, 0x49a4}, {0x4, 0x2, 0x5886, 0x2, 0x80}, {0x1a, 0x2, 0x9c5, 0x6, 0x7, 0x5}, {0x40, 0x0, 0x7, 0x80000000, 0x191, 0x1}, {0x0, 0x1d35, 0x4e12f682, 0x1, 0x81, 0x9}, {0x200, 0x3, 0x2, 0x8001, 0x8000, 0x730b}, {0x7fff, 0x20, 0x0, 0x7, 0x1, 0x1ff}, {0x78000000, 0x100, 0x1, 0x100400, 0x20, 0x5}, {0x4, 0x6, 0xf3, 0x24, 0x3f, 0xfffff49a}, {0xfffffd9a, 0x2, 0x7, 0x1, 0x100, 0x5}, {0x1, 0x0, 0x400, 0x4, 0x959, 0x994}, {0x6, 0x7, 0x5, 0x3f, 0x0, 0xb708}, {0x2b37, 0x10000, 0x8, 0x13e8, 0x4, 0x4}, {0x5, 0xf735, 0x2c, 0x86, 0x1a1, 0x4}, {0x3, 0xc0000000, 0x7, 0x8001, 0x81, 0x7fffffff}, {0x5, 0x582f, 0x20, 0x9, 0x2fd, 0x40000}, {0x4e70, 0x0, 0xf6, 0x4, 0x1ff, 0x4}, {0x401, 0x1, 0x7, 0x9, 0x40, 0x83c4}, {0x800, 0x1, 0x1, 0x5b9, 0x4, 0x9}, {0x8, 0x1ff, 0x5, 0x8, 0x3, 0x5}, {0x8, 0x2, 0x6, 0x0, 0x5, 0x2}, {0x7fff, 0x322b, 0xbd32, 0x7ff, 0x80000000, 0x3ff}, {0x5, 0x9, 0x8000, 0x1, 0xd7b9, 0x3}, {0x8000, 0x8, 0x1efd59e4, 0x20, 0x8}, {0x1, 0x6, 0x9, 0x4, 0x0, 0x400}, {0x4, 0x4, 0x6, 0xf4, 0xa7d, 0x1da0}, {0x6ad, 0x9, 0x2, 0x4, 0xff000000, 0x5ba}, {0x7, 0x3ff, 0x180000, 0x1, 0x7f, 0x1f}, {0x401, 0x5, 0x80000001, 0xffffffff, 0x8, 0x5}, {0x4, 0xe1, 0x80000000, 0x26, 0x2c6, 0x1}, {0x65b, 0x7fff, 0x3, 0x9, 0x30000, 0x3}, {0x1000, 0x9, 0x8f, 0x0, 0x20b, 0x100}, {0x7, 0x8, 0x1, 0x332, 0x100, 0x7fa6}, {0xfffffff7, 0x37d62b39, 0x9, 0x7, 0x6, 0x7}, {0x0, 0x7, 0x6, 0x4, 0xfffffff7, 0x5}, {0x80000001, 0x1, 0x3, 0x40, 0xffffff01, 0x53}, {0x7, 0x4, 0xbe, 0xffff, 0x10001, 0x80000001}, {0x0, 0x4, 0x4, 0xe0, 0x9, 0x515f}, {0x9, 0x2, 0x6, 0x1, 0x3f, 0x8}, {0xb3, 0x2, 0x3, 0x102, 0x101, 0x7fffffff}, {0x9f2f, 0xffffffff, 0x118e, 0x6, 0x3f, 0xd9}, {0x9, 0x200, 0x2, 0xd24, 0x0, 0x4}, {0x7, 0x7, 0x3, 0x2, 0x7, 0xfffeffff}, {0x70ab9746, 0x8, 0x4, 0x5d, 0x9d4a, 0x1}, {0x20, 0x1, 0x5, 0x3, 0x5, 0x7176}, {0x6, 0x6, 0x4b6, 0x80000000, 0xe7c, 0x3}, {0x5, 0x4, 0x101, 0x101, 0x6f, 0x8}, {0xb0000000, 0x3f, 0x800, 0x0, 0x9, 0x8}, {0x6, 0x4, 0x0, 0x8c9, 0x80000001, 0x3}, {0x5, 0x7, 0x9, 0x6328}, {0x35, 0x2, 0xfffffffc, 0xfffffffe, 0x9, 0x1}, {0x8, 0x2, 0x0, 0x7, 0x7ff, 0x8}, {0xfffffff9, 0x1000, 0x8, 0xb52, 0x7, 0x7641}, {0xfffff800, 0x9, 0xfffffffd, 0xac, 0x400, 0x101}, {0x5, 0x8000, 0x1, 0x7, 0xfffffffd, 0x1}, {0x7f, 0x2, 0x1, 0x6, 0x19f6b000, 0x6}, {0x1ff, 0x3, 0x1, 0x7, 0x3, 0x6}, {0x7ff, 0x200, 0x5, 0x2, 0xfa0, 0x7}, {0x9, 0x1, 0xfffffffa, 0x2, 0x1, 0x2}, {0x9, 0x2, 0x7, 0x4, 0x7, 0x4}, {0xb86, 0x400, 0x7, 0x8f, 0x400, 0x20}, {0x10040000, 0x10000, 0x5, 0x80, 0x9, 0x2}, {0x35, 0x200, 0x6, 0xf5ee, 0x7c, 0x2}, {0x2, 0x7, 0x1, 0x3, 0xffff}, {0x10000, 0x0, 0x8, 0x1, 0x3, 0x8}, {0x2, 0x3, 0x1, 0x7, 0xfffffffb, 0x7}, {0x7, 0xfffffff9, 0xfffffffb, 0x8001, 0x3, 0x9}, {0x8, 0xa5, 0x5, 0x81, 0xddd, 0x1}, {0x0, 0xe66, 0x100, 0x80, 0x6, 0x2}, {0x8, 0xb8c, 0x1ff, 0x7f, 0x100}, {0x9, 0x1, 0x1ff, 0x58, 0x200, 0xff}, {0x1, 0x3, 0x0, 0xfffffff9, 0x7, 0x1}, {0x1, 0x9, 0x7, 0x8, 0xb3, 0x6}, {0x400, 0x3ff, 0xffff8000, 0xff, 0xff, 0xfffffffb}, {0x8, 0x100, 0x8, 0x1, 0x40, 0x20}, {0x0, 0x8, 0x81, 0x3, 0x6, 0x8}, {0x7fffffff, 0xfff, 0x3, 0x6, 0x7, 0x80000001}, {0x7fff, 0x9, 0xfffffff8, 0x1, 0xce8c, 0x45}, {0xd54, 0xffffffff, 0x5, 0x9, 0x8000, 0x9}, {0x2, 0x1000, 0x1, 0xff, 0x10000, 0x80000000}, {0x5, 0x4, 0x4, 0xd7b, 0x3c, 0x8}, {0x1, 0x2, 0x6c3, 0x6906, 0xffffffff, 0x5}, {0xc743, 0x858, 0x7dc, 0x400, 0xa67, 0x8}, {0xfff, 0xf4, 0x6, 0x9, 0x9, 0x50af}, {0x950, 0x7fff, 0x3, 0x1, 0x4, 0x10001}], [{0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x5}, {0x0, 0x2}, {0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x0, 0x5f71e1c33e2e239c}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x7, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x4}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0xda17cfb94beda485}, {0x5}, {0x3}, {0x4}, {0x2}]}}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0x8, 0x7, 0x0, 0x20, 0xd9a}, 0xc4, 0x9, [{0x4, 0x1, 0xfff, 0x3, 0x1, 0x5}, {0x8, 0x3, 0x4e, 0x6, 0x1, 0xffffffff}, {0xff, 0x4, 0x5, 0x5, 0x175, 0xb2}, {0x4, 0x9, 0x101, 0x3, 0x7, 0x1aef58db}, {0x6, 0x9, 0x8001, 0x5, 0x0, 0x543fbf5}]}, [{0x8, 0x85, 0xe392, 0x9, 0x57, 0x40}, {0x2000000, 0x3, 0x40, 0x0, 0x100, 0x47fa}, {0x8, 0x7, 0x1, 0x401, 0x7, 0x950}, {0xfffffff9, 0x0, 0x5ad569e7, 0x0, 0x6, 0x20}, {0x5, 0x8000, 0x9, 0x8, 0x7, 0xd8}, {0x943, 0x9, 0x1, 0x3f, 0x0, 0x1}, {0x3, 0x800, 0x3, 0x1, 0x3e, 0x1}, {0x400, 0x9, 0x8, 0x6, 0xfffffffe, 0x2}, {0x2, 0x4, 0x3, 0x8, 0x5, 0xc1a5}, {0x2, 0xcd2, 0x800, 0x8, 0x20d, 0x3}, {0x8, 0x5, 0xd50, 0x65c8, 0x7, 0x80000001}, {0x7f, 0x7c, 0x847, 0x101, 0x1}, {0x0, 0xe61, 0x3, 0x3f, 0x3, 0xfffffff9}, {0x1, 0x9e, 0x9, 0x1af, 0x5, 0x7}, {0x6, 0x5, 0x100, 0x400, 0x40, 0x4}, {0x1000, 0x3800000, 0x8, 0xfff, 0x4, 0x8}, {0x1, 0x2, 0xfff, 0x401, 0x4, 0x400}, {0x7, 0x0, 0x7, 0x3ff, 0x7, 0x1e2f}, {0xff, 0xfff, 0x0, 0x1, 0x8001, 0x2}, {0x3f, 0xb317, 0x8, 0x6, 0x2b, 0xffff}, {0x3, 0x20, 0xfffffffe, 0x800, 0x400, 0x5}, {0x4, 0x3, 0x49e2, 0xfff, 0x4d3, 0x5}, {0x5, 0x8001, 0x0, 0x10000, 0x1, 0x3f}, {0x0, 0xb3, 0x5, 0x8, 0x10001, 0x36bf}, {0x4, 0x31af0160, 0x3, 0x3, 0xffff, 0x2}, {0x5, 0x1000, 0x43ae, 0x5, 0x8, 0x5}, {0x3, 0x100, 0x36, 0x8, 0xd52, 0x20}, {0x2, 0x5, 0x8, 0xab, 0x6, 0x8001}, {0x0, 0x3, 0x4, 0x101, 0xffffffff, 0x80}, {0x6, 0x80000000, 0xea, 0x7, 0x9}, {0xb8c8, 0x8000, 0x7, 0x7f, 0xffff, 0x40}, {0x7fffffff, 0x7fffffff, 0x5, 0x0, 0x4ed4, 0x23}, {0x0, 0x2, 0x9, 0x2, 0xfffffff8, 0x100}, {0x4, 0x5, 0x1f, 0x200, 0x401, 0x8}, {0x4, 0xfffffffc, 0x5, 0xfffffff7, 0x49, 0xffff7142}, {0x3, 0x1, 0x400, 0x8, 0x0, 0x2}, {0x9, 0x80000000, 0x8000, 0x2, 0x9, 0x8}, {0x7fffffff, 0x3, 0x4, 0x40, 0xfffffffb, 0x10001}, {0x0, 0x6, 0x32, 0x8, 0x7fff, 0x9}, {0x3f, 0xffffffff, 0x80000001, 0x7, 0x7f, 0x5}, {0x3, 0x5, 0x2, 0x1ff, 0x8000, 0x7f}, {0x1ff, 0x98, 0x8001, 0x1, 0x1000, 0x7}, {0x3394, 0x6, 0x400, 0x3, 0x63, 0x91b9}, {0x0, 0x800, 0x5, 0xfff, 0x80000000, 0x3}, {0x2, 0x3, 0x80000001, 0x8, 0x10001, 0x800}, {0x9, 0x5, 0x52dfa0ef, 0xffffffff, 0x0, 0x4}, {0x0, 0x7, 0x2, 0x7fff, 0x9, 0x7}, {0x6, 0x634, 0x1, 0x1ff, 0x80, 0x80000000}, {0x9, 0x7, 0x1, 0x1000, 0x5, 0x5}, {0x8f, 0x0, 0x101, 0x3, 0x2, 0xfe58}, {0x6, 0x8001, 0x89, 0x0, 0x0, 0x6}, {0x7, 0x74, 0x0, 0x5, 0xc3, 0x9}, {0x8, 0xffffffe0, 0x9, 0x1, 0xf30, 0x7ff}, {0xc9f5, 0x8, 0x8001, 0x6, 0x101, 0xbe}, {0x0, 0x7, 0x1, 0x9, 0x2, 0x10000}, {0x7, 0x1, 0x2, 0x2, 0x9, 0x10001}, {0x650, 0x20, 0x1, 0x7, 0x99, 0xffff}, {0x20, 0x80000000, 0x5, 0x3, 0x3f, 0x9a2}, {0x80000001, 0x80000000, 0x200, 0x10001, 0x7fff, 0xffffffff}, {0x5, 0x3ff, 0x1, 0x4, 0x7, 0x9}, {0x10000, 0x1000, 0x2, 0x2, 0x100010, 0x8001}, {0x1000, 0x8000, 0x52, 0x6, 0x3, 0x80000000}, {0x7, 0x2, 0xbd1, 0x6a5b, 0x9, 0x2}, {0x7, 0x81, 0x8, 0x10000, 0x3, 0x5}, {0x1, 0x81, 0x9a5, 0x20, 0xfffffc67, 0xfffffffe}, {0x1, 0xfffffffd, 0x4c000000, 0x7, 0x9, 0x1}, {0x7f, 0x2, 0x6, 0x200, 0x8000, 0x9}, {0x10001, 0x7, 0x7fffffff, 0x401, 0x10000, 0xfffffff7}, {0xfff, 0x4, 0x85d1db6, 0x9, 0x200, 0x3}, {0x6, 0x6, 0x0, 0x6, 0x8001}, {0x1, 0x1f, 0x9, 0x0, 0x0, 0x8}, {0x1e8e, 0x7, 0x3, 0x1f, 0xffffffff, 0x6}, {0x8001, 0x0, 0x4, 0x0, 0x9, 0x7fff}, {0x9, 0x7f, 0x13b86d98, 0x90f9, 0xffffffff, 0x5}, {0x7, 0x5, 0x3, 0x0, 0x3, 0xe94b}, {0x3, 0x80, 0x10000, 0x3, 0x0, 0x9}, {0xdc3b, 0x0, 0x1, 0x5, 0x3, 0xe745}, {0x7, 0x80000000, 0x3, 0x3, 0x0, 0x2}, {0x9, 0x4018da7, 0x1, 0x0, 0x6, 0x6}, {0x7ff, 0x10001, 0x7, 0x3, 0xc0, 0xfffffcf7}, {0x9, 0xa28, 0x9057, 0x4, 0x45e843d4, 0x81}, {0x7, 0x2, 0x1a, 0xffffffff, 0x80}, {0x400, 0x0, 0x4, 0xed75, 0x3, 0x2}, {0x5, 0x4, 0x1ff, 0x6, 0x1ff, 0x7000}, {0x1, 0x20, 0x400, 0x5, 0x10000, 0x2}, {0x81f1, 0xffffffea, 0x1, 0x400, 0x0, 0x9}, {0xfff, 0x1, 0x3f, 0x3, 0x6, 0x8001}, {0x8000, 0x5, 0x6, 0x0, 0x8, 0x7}, {0x2, 0x9, 0x800, 0x4, 0xbd4b, 0x9}, {0x800, 0xf1c19951, 0x5, 0x35, 0x9b9, 0x285d178e}, {0x401, 0x5f6e, 0x0, 0x8, 0x8001, 0xffffffdc}, {0xc101, 0x5, 0xfffffffb, 0xa0, 0x0, 0xe7}, {0x200, 0x4, 0xffff0001, 0xdf28, 0x7, 0x927}, {0x401, 0x8, 0x2000000, 0x1, 0x80000001, 0x1}, {0x0, 0x2, 0xec0, 0x8000, 0x3, 0x5}, {0x5, 0x4, 0x8001, 0x5, 0x6, 0x400}, {0x1, 0x1ff, 0x81, 0x6, 0x3, 0x1}, {0x1, 0x2, 0x4, 0xffff, 0x5}, {0xfffff800, 0xfffffffd, 0x28, 0x4, 0x7fffffff, 0xfffffff9}, {0x6, 0x80000000, 0xfb4, 0x17b0000, 0x81}, {0x380000, 0x6, 0x3, 0xfff, 0x7, 0x4d9}, {0x24a, 0x1, 0x400, 0xfcc3, 0x9, 0x6}, {0x4, 0x80000000, 0x26, 0xffffffff, 0x7, 0x8}, {0x7fff, 0x100, 0x3ff, 0x36bc52f5, 0x10000, 0x20}, {0x40, 0x0, 0xfff, 0xffff, 0x5, 0x5830}, {0xd, 0xbd6, 0x6, 0x1, 0xfcca, 0xac28}, {0x666b2ab, 0xbdeb, 0x24, 0x1, 0xd6b4, 0x7d327c66}, {0x7f, 0x9, 0xb92a, 0x5, 0x0, 0x9b0}, {0x3ff, 0x7ff, 0x2, 0x467, 0xfffffffa, 0x98000000}, {0x7ff, 0xffff, 0x8, 0xbe98, 0x6, 0x101}, {0xff, 0x9, 0xfffffc00, 0x9, 0x6, 0x4}, {0x6, 0x278, 0x7, 0x2, 0x1, 0x9b}, {0x8, 0x3, 0x8001, 0x10000, 0x7, 0x8}, {0x9, 0x0, 0x7fc, 0xff, 0x9, 0x3}, {0x4778, 0x0, 0x16900000, 0x7, 0x80000001, 0xcc8}, {0x3f3, 0x0, 0x8, 0x3, 0x1, 0xff}, {0x81, 0x5, 0xb138, 0xfffffff7, 0x9, 0x2}, {0x4b, 0x2, 0xfffffff9, 0x3f, 0x7fffffff, 0x6}, {0x20, 0x784, 0x7ff, 0x7, 0x3, 0x9}, {0x40, 0xac3a, 0x800, 0x7fffffff, 0x3ff, 0x200}, {0x81000000, 0x9, 0x7fff, 0x9, 0x9}, {0x5, 0x1, 0x80, 0x458, 0x6, 0x9}, {0x8, 0xaa, 0x0, 0x1, 0x3ff, 0x1}, {0x4, 0x3, 0x1000, 0x401, 0x81, 0xfffffff8}, {0x8, 0x80000001, 0x8, 0x1, 0x4, 0x3}, {0x0, 0xfffffbff, 0xffff0001, 0x29, 0xec7, 0xb4}, {0x3, 0x9, 0x2bed, 0xafe8, 0x5, 0x400}, {0x2, 0x100, 0x3, 0x0, 0x7ff, 0x80000001}], [{0x4}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x2}, {0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {}, {0xd6b90c3e78edf373, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x3}, {0x5}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x5}, {}, {0x1}, {0x3}, {0x4}, {0x1}, {0x818589cf4109e552}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}], 0x1}}]}, {0xc1, 0x6, "78a0aafeade26cfd830c9977f528fe4f9b9df15c3bd643f5dc5af6b60d426440f718bb7f482edd85d4dc139bf47e31cfe31bdc865874a0429d4e64bd982f364c1de1f8b7c57dee1c11560a164604d0f519b9682c30b5b2651dfd1c840a5efb5ae4c7cdac067be678e0a7a87f80eabdfefbce4339274dc6bb76bd0ba63230a126b480116a29b99996a1470df1c70c3d82dc41d7a39f376b39277847063130d1fedc17ed02a88a2a4cacbc18cefa033203aec516f61ea4818f1d21724223"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x1068, 0x5, 0x0, 0x0, {{0x9, 0x1, 'csum\x00'}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x8000006, 0x9, 0x5}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x6, 0x5, 0x7f, 0x6}, 0x31}}]}, {0x1004, 0x6, "77a274702fe468cf461ab9a2cc911c2ef322ea4921a5a4356e0894c5d4780569f0dfd10771592d0baa6879ab98e71a7b8881e334e587f745d7faf8d2951845fafecd18f05e29b9b6855e8a8eea45335ab2ed0c476b001904d414abde629087c3f3d8cd760602704e5fd5cf1746b0e2c19847825cf1cc2b545c3f53a537f27cead37dbda32011e39c1ff1f7a0c4045ff3a5e2dce241e8d07257d8ebdac8a5a2b9de0aea171750620d4e7be03a2b19d8d17201060037bc7a1b1fc78d8445bd535163da45338759510ad57074025772abeed98ac9167f793ff7debc515429411e5823c1c62e74e095db4989c3640ca8ebfd57030ef3ce8b24d883e799317f3db1d806553ae76d2c1942fa6f1bd2d7735a7b1c95b6e136a392476a21e792b28a0abcd8f2d0ccb61e29b1cfe6febdc42313a25b4d1aa84b663688026175bc0fd9df333608ca12126a5cd35873ee760464fb61d784268d90a1c7071a42f7bac43663145369b3893587116f0eeb5ab0af57a9402b200883286b1f6e6ae3e02e13a194aa8f454dfe4369add2fddbbf3d6336ee4a2e0ca40a6adc88a0a7c5232741eab9e0050f0b967bd7891780489ff8184b82e49082a922825078da5455ac110b2af5f0be74a9902b83683633eec191b6496c18685af9eab41677737c1893d7708a14a3976e359176a223894d2db654d15e4e834a18445cfc8e70caec220383d199afe0bcdf789df2dafe7ca6b2d63f3442089e32aaaf9543b9737f83e4d6c9b06cbc4bb0846c13831f13c649fc6ea13aafcc67487f60a6274ba6ea7b19edf68963476553c902329e46df76372d1ff0608cf716e24b34e409c475531d51687920582973044cf55572f8700d22d4e5c34ce06456373db3d42edabd7f78a3b12e28b4c19a1ffd277adc5677cad6e48f79162e1d1d2b737933863aae84cdf6ad5456a931ec1747fc033423920dff31530d6d74456bcd1156769695db5e2c2b2702889f0e75bc5ef8b024f39fd7af236df3c1eeec8e3741d19b5d56d8c5758694f98333333f9526fe1afc97b3966574b857dcd07db9867450767947157b6139077ffa73182d8e352f5cad5e9bbf46cc5d2f9caa6a22e1c3e0af596df61e4333361cfd87946c7978dd37ee95c448eff7e72e3c5b5b95d67a9beb8dc217f2839a5198e35908f0280eaed587bc26ef743e7efa9f74619e6961bdd1bdc21f625dd05f9f2e1265fd6b1d32a11123066fc338233fec7bd44509bb2d2bf80440da2e0a67974e579c3d49070969f3588b8d66776075523b561ce73aa573e012df792b4ca19f52f5615326f6868b9ee20e07f8bb6db1b8510a08713dd58ca4fb2bad50f6eb1844d08998d4809b8cfea805ea4987dcd65a31e03a95c5e1211c446109bb9052809456997bd3854014050a28d5a035c4f730717d624b3a3168f684385a5c889bf94295b082c8920bcc4e025f95c4013120ca7c58a9af3757b1ad2538ef14f2dd695a919b28968b540b33c2a4290c05c4ed65699ffcc67262924e6608416083cf57b850fff2040c0b128eb14b651f39ee22f731dc53086d6baa63f787121278c250934f551e7ee1ffb0acbb3fc514340f93e137b097a71bb2765b84a289549902d3aca9c785ca75ceb14b0ccb89d79caba2471abee5bdaaae30b4994206a6536de9d999a1a9e6ea6c43bac08916a74a3c012c4a0b449f5ada8f5014362b5861348e0ae1c50e556692478514084d8235ba38f8a927c0d68855ca66bb287d8dfab6048a1bcbff38bd3fbe77930e38ee4a0968afb173c4ef4db8c64eb48ff5cb4e891aa1615e94a9473e658c8991388cb096086e88007e941f09a2612a618bc1ec04babfd9f21407a8e77ca44cfde81381e59e58461fd2696827b1610b871aafa0fe482098a83523c48c5f2a01fc6db519daab283509856754838459a32cad9e27b9e9960f5e6a8837c91808feb7cddf6fa75ffafd7136e15e91581ea2d983f94b500d1a75a32a108552a10b1fcd92813bc73f2f073e9dff65605c7362fe4e2328348efb4f0ae7f46b7f35eddb89b745244e0d5e3a380a0aa4bb2906d922e7e606ea6b1391477761d2fbecb35783f9647ca02109df27cec982928b4bc5ef3657e9cd088f95e670c7dff14822f2488ef4ee700840e138b339dd3120d0560d3a848fea5c5d100599bb75d857a85dbc88b13900416bac6acfd27ed4e261b737e12e77c8dbd9f821d5ff2fac074a6614ab139dc25eec9f1388dae8c904c00655b87865027af5f1c2f358a97c2cbb8ae1284f73982eba9efbf470542d83e3625b59f651131d41d8b8d2187220d187b939f1afd0478366eeb80ea2e0e9763d41eecbbfbcd801f1952608c23569c41bc2cce688be39b676ba726a9c7318a00714602d15509380902ffa42a90a78ef0dbfc71d88124b2bc0d7a212555f16e22d74ee9b2f0774e25cb359b6ec095568e5459f371bf699cba3c429ef931448567055e1d89267504dcad164f1449833dd98174ec6d3038b14234e7ba31b7610a6e165f9efe262d849a2e18b1f9ea621ebe05a6db485c19016a76954a4f39605296bde8815e9e6c70a2330babf3565c559f66905b917e9b0c18400b8f75d54f913c373e4a2a5c9a24d7ab79f4b4619a74197cf3f440382cdb12b68b6b1401170cbe14b7fad76d98e39901833a43caebab90c759be7098d5a81a642564cf2211482fce844fbddb38a065c5803c0b68a5c8dc33a29014da55b304810689070e9e7cad0a3dd7c868707594f1eef952e29d242a104811646f0fcbbb599b561972d8ed1933a6d664541fbe23b1e422b4a1f771fe1e441cd0ad7666fe0cdea3a157d62730abfc999836c03b44146ee3975e5b554753de763145aa67f54096e6357a5f5a740966572ef079286642d366f0f9aabfd826a1c3e14316f3684dbec96c359d028c5034153ba6f2da4a7eee1b676ef82b881efd8ec918a07d1e94aff8442c8f1111fe6a05da2e5f23f576b7180d74f9c1c050c01d99016d1e22fb26bd929773a7898a409c3d4eddf2bc230027126196819289dd331e6761af9e5fbe7052210901b714456c95fd2683379c717557c9e295ee910935798a01176a670e0dda87f8e1d9419f3a267502050210a04c03aec16a354b2cb2cef1eb6c1f84a135fe95bacb6a5fd5d7867590d3d946e6ccdd3b8fe158acc2b1c378cc461d1f32ce50b3396b560cfb0018ae3d8570506d5ac707e427e36d6a55158bc22796eb3b08aac8d86bc68d66bfdb3a8da36af4e4b186dcf94026708b4ed853b33525e07408ccf257dd87271064b468913cbeade92d8a018c2b66e653a5d4a543ad068d1de74cabe45f30d62c86b53e2d7d2a24e3c441d76a589286eac73612efa158dd20e8cf6e7f67e81fffce43c696074c4bbd1097f4a631bd205588e856504869517d5f6072b42d3f7b0b2bc17ad813e2aa0bb1d6ae76a878577fd6eb30f93ec3432be75a976b2ecd1ceb339213bee8c2e45bb27f74fc125ecd35df62534024bb9d8bb44d2aab7f7eed45f42057d5846d92bee4f0da415b92b40e46705c1dbb37febbb5eeee73afafecfc709d0c19321bad4b3e26f68c159ef8ad0fda7e61421686e9746965849122213522cd85f1671985d49dfb37fcf27c1eaecb2edb06490d064afe245fba1273dd46ef92e811d6e70a1328aac47445ebdb33f1023acf9f399d519a755038ccc7537febdca4e087b17560a53598013bb31f5c5dcc5fa622bdb10b194e9121de6208de09c7bf3b45e43c4421e27a2e578e89d3d1015aca0e550b05195635072281e135913fdb209ac7576cd4be589e3c3c2d09d44471f7e6b892a25fde55bf8896e25d4a053a64fea57a5b295c54692b7f9d3a8444ff31d1d3e9a1fe49f32c75acaf59731e40460c47cbc49e25d3ac3df95c10546b820773e42c130105f9ebf86fd820a44396df4557b974138fd1746240b912760a9e23839919bb25c62fe865572e22c374ec737362b6c2fd132acfb9ec4ed40424b8e200ebbabbd333b603575251f62530bfbeef8ff3d32839b44112cf469f0a586f3e3ef629d863ebe42fca52d6db4c9f4fb04fefa6f8189269881c2a31b88567aecc7772fc7e1b7e0e03d7b919cf27985a030117a26291e637e1585eed47b66d7af45136683501244a47b57e9eee9839928788ac3e288f1ae2506e18d5971a3683883717d53ea980a2b7cf1268a3bf0261ef121b9c56e43748be421f71a9935ce4dbbddbd6631a97dbbc414b7f5b7e4adb067e2d910a39f2f024d9a5f23831d96e88bf5db51b3500d9f0ebb90477e1df33a5fa2dffdde9bf8c92644fdfbf0be54cc5a2887390deaaeaf0418f2bfcb489b986e677f4dc2aaac24247229d0d9526c5013f00ee7b1017beaa3e972242f45c0a3d5fa39aafacbd7501960b50a866714e7af6de4ba9c216ad63f0ffcbb72c16719159dc41680f6a77f9ceb30fe6b5cb0081c6d6d92b517e16faba4d6f64761b5905e60d578a79536b008fe667d4ee02ae93001762a096f1a05a552595dceaae7f51eb5b4980efc598902380b29ff0c30921c115fdc89def53bf27b188c173bf171b49ac887a644181de6aee7eb6700ea884acc326b595855927104afd8b7142883acffa10085594b6234adb2f405cc904d95b7922aa607efa22b6caeb93781cfa094006ca89c99daf163d08b2d8cc63c72a6e8cc04fac3f7f1539469d29b4464a3b7b1ce3aced2314167fdeb9a041a3bb9b6ad019e3261dd747eee68c002bd57cd148fad57c90e3b3ec939ab786ae86638e217bc6aba5a6996d717e2bf4ebfd4093c2a0525f29939b1fa4ba1231c1ca3a052a7387672e3f42dd50fce5c35b923e73e48d99c63e8c4dd0d7091163992f0d69e1a0c92abe2f56b252d1dc8d15adb18e22f3ea8ada5b42c319abb4a03549ecae480533ad7cd3f552e30a6c0f2f40834911781e166af7677fe9596a0e29128b9e8e362a93f87255599774ada65eca01b9ac5f35b89bdd66b175fd92a3e8ec46d961282f113c9fdc6ba1e9c9c789ff508d858991b1c552cf583b9c61f5d9fb9531112545741a7c457e3895bc61eb3e42e935fad3b476e4fdc124aaf030869921f80751800e34b8df6561ef2a37fb2cba39b8fbea53d61642a0ede12ecdd98a5e2c2f0e160a8d7ae49fa5a802a955e23c5dac1159a06b32490dbd512d37da28c2e32c4631210a1493dc9ed0a6c6cb7b41107d2f4fb211f07189fffe0a7afa20a36d84d2f8b9dded267c68094c15cf936c5d1d8c4075e83330fccdb37a42fe6428a86c6eadac9187bf33c2d552e0b6b6db367a896d3317f4ddb415e2e111ca3fd25a1fea936f9481f211bd48cde029821861abd5c093e76382d54fff599ba8fd6d11d10effdcba4c37cbd70bda8d52583e2234aab91ed6c52ffffc6479ca9a932121a383423f911901f709b45dd5a4f106dedd999fb9c59c4aa05ca75c3c7093c2ffbc6ca07939d01c0e0c222661731ec3e1e21769d592faec2a30813f86f0fff605b2db964ac2d048f97bc97496dad393ae32f987dfa82c8111a85870df0d2d1c9aea7c60f5efda4772445a8ad17e24644e000fe32e441e3b13bb5880e87a7706bbf0971265dfe93860708c0e265066f1fc585a4f999d91d9ca171f9feaac33218dd8d437f62c8190b26af9b866404f07eb48bebdc7402c9763edd51724bae0bc05aa01f09b726ac23eb0fbb64cb3f8a3c6e7b9a0c1fbd252d91aceac571f26ec0a1275008ec33e15d5a72c8c6f496a7b9015cb89da27fd0f51679bac0fc74ef68637785835e2cc2812fa5863a90b1ddc3299b199ad370"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ctinfo={0x1040, 0x2, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xff}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xb4}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x16c, 0x8, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x1, 0x8, 0x7, 0xadb}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1e2d}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x5}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x40, 0x1, 0x2, 0x3, 0x3}}]}, {0xed, 0x6, "dd07377acacfcc1170e3e113acf22842c4c1f646352719017a0987b153feb2a27cf76db9cdb168b087d57e4f84baf52c3e672165dc3e3925d028a3dfdd0610d939a6bc54c21592e69b7f13a04343e88db2d1cfdf71f60d4c79986a119fb09c798019e487741e9b2fd15183a6406a4bd50df486fc23f8c66cb07b24635b41cc1b47cbcdb4be17debcfcbc61a2d7aba5c51e63b161505f2caa32244dd7e087e0ee2b3e3de8b48da58958010636364947d6b5f126e0862afbb5300a0e25695cd8142c377464adb64c8a09c4008bb78664db21df4db3ab73faa3dd6c2978f0dbf679d472e637d5ed130d87"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5}}}}, @m_sample={0xbc, 0xb, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x8000}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xe1, 0xe03, 0x2, 0x3f}}, @TCA_SAMPLE_RATE={0x8}]}, {0x30, 0x6, "4433b5036e20e0b7fa1d5272664cb8ed73a09b5679b2e853264125abe43975b48a6c84e4e066001bd9643dff"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}, {0x474, 0x1, [@m_skbmod={0xf8, 0x14, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x4}, {0xcc, 0x6, "d96c3e4433aeb8473fea720d571bf55dbc2b5524c9d5ab69fbed26e45d0806b57545edf62c34ced51e105217b1d2c8f73f2f9843ebe69b40dc94ff297a43fb61e3708910a735f89fefdd448d72b47f822d3ee23ec120fcb908307312ca89acfce6923b8478c2c1466fd2ac3f73756fd0c4c3baa3415c52c48782410d1fd722ee99f68232de5bfa75a7f4a53ecbbe0463040be103626e63e1b97c0fc9988ec5ed507e07fbd30088781901077b370dbd96b54ed96bbe42800c4c87fe61ec9152c55b81b2f5ce6ff3f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xcc, 0x10, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x6}]}, {0x97, 0x6, "51bab69ffcde58e2de24daea7b112042f436598f3f713a9fa21765415eb99540825c3d39592047782fa95e94be3cda210fd579e7794818b42f83da4bb8d236a96db5d21e702ef0a2861ca17c34416552ce999578de6a5cb3637e3d7ce7f67712d4a7e57f3a80c6da9cd898bbbc36557f29675b67fc01d693afe64ba874ccfd607182dec8544c7615fbf2660b7798a77d72ba42"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_police={0x194, 0x2, 0x0, 0x0, {{0xb, 0x1, 'police\x00'}, {0x98, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x6, 0x6, 0x7fffffff, {0x3f, 0x1, 0xfc01, 0x9, 0x2, 0x3}, {0x0, 0x1, 0x1ff, 0x2, 0x2, 0x1}, 0x2, 0x2, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xae, 0x3, 0x8, 0x40, 0xbbfb, {0x7f, 0x0, 0x8, 0x0, 0x200, 0x30}, {0xd8, 0x2, 0xfc00, 0x1, 0x7f, 0x400}, 0x9, 0x3, 0x5}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}]]}, {0xd1, 0x6, "60de371ca430d44f4020043962fa7b7c68540494105fc0260410472ba31cc838109cc912296c8dedbd27f476c58c274447fc32eb0c7493f83e948ab0ab2c13311ee4e0fc6ca20c7f3f5b2c47f1550706a815fc3c5a52e6908319b73054a5efb649b557688c5304e42710844b83bb9244758db0379cfbf8afe0184edf4220f604572bbc37db3597c15227125db9c6e1f5e7ee92198f84bedb1d706f63d82bf68bf941542a4f8a81f6b75f02f0064ff1496dd8c4f90029ac92364f24db7b77e375e0df0c914ef2687f8170c1d255"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_connmark={0xb8, 0x9, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x0, 0x4, 0x827d, 0x100}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x10000000, 0x7, 0x800}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x401, 0x1, 0x87f2, 0x1}, 0x101}}]}, {0x32, 0x6, "975741b56cf154b6af3c1af09624337ceaf23024566ecf352dbf701170db6c8171dee23491dc6427acc8e95dc59c"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_sample={0x60, 0x1c, 0x0, 0x0, {{0xb, 0x1, 'sample\x00'}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3}]}, {0x2b, 0x6, "0edfdfe408a6047f5374d2596e98e454efdcc795e0447b36f9dae9d87ef4a430bb4c2ac50dd071"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, {0x1ec, 0x1, [@m_nat={0x1e8, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6a, 0x64c08953, 0x0, 0x9, 0x3}, @local, @broadcast, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0x7, 0x9f7, 0x2}, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0xfffffff8, 0x2, 0x200, 0xa3}, @empty, @private=0xa010101, 0x54aa65e353fa8003, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xc3d3, 0x7, 0x5, 0x200}, @empty, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x101, 0x0, 0xfffffff7, 0x9}, @dev={0xac, 0x14, 0x14, 0x44}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}]}, {0xf8, 0x6, "a022e28b9f648172049d3a196bd84fa5b318e6c9264b49c96ce1d06d4657bf23a7beb031d9e607655aa1927cfd4481f0f4758d2178e86244b80e74249096361d1f9973067b720f143a901ba221329e9c26f20aa84971ab4e22acdd8174384b6e013ea941dc72301508222fcc39d2ae16336fb1b1daf51ed1daaf19355ce25f67cca468f60d7ad142cbf59ee3e79897e87ba285fe153bc0f138cb195f9d32db9c284ddf96089776fc737967886e9d4ec67aa11c9516568fe70766af24c4ab409389db800c8581e1ee716a1d4277fa2924c95e43bb673922f565a727e11e6e658accd8a8f5ce933eac54fc3a5b9de98b6f7ba86fc6"}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x8330}, 0x1, 0x0, 0x0, 0x4}, 0x80) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0x1d5) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r2, 0x8008330e, &(0x7f00000000c0)) 16:55:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x2b, 0x5, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r8 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r11 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x174, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x44) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf0) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) 16:55:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') write$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x800, 0x4182) read$snapshot(r0, 0x0, 0x0) 16:55:17 executing program 3: r0 = socket(0x22, 0x6, 0x1000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf2555000000080001003f0000000c0099000600000038000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010c0}, 0x20000011) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x40) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$SNDCTL_DSP_NONBLOCK(r2, 0x500e, 0x0) read$snapshot(r1, &(0x7f0000000300)=""/138, 0x8a) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x300) 16:55:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x700) 16:55:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfffffff8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4041804}, 0x408d0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000080}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x800}, 0x4044854) read$snapshot(r0, 0x0, 0x0) 16:55:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x1f6f40b7b625a151, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa35c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x88, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2800000}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040080}, 0x40040) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r4) 16:55:17 executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb0, r0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5b}, {0x6, 0x16, 0x31e0}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0xffff}, {0x5}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x9}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24048080}, 0x8000) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xc7, 0x97, &(0x7f00000003c0)="dfbc71338db383856f13683bf222b36afc9570d6695e1c265471eac334fcd1360b0934e2418fdef81bd8655f03865babca613e28712ab1ba654a331bde526b13a127a3783c59efcbe2a2f64e8b528fa7df453833f2032627f8c0bdb7c71cbe403471c323df9441a8d92ece0cffc15e0bb122076f9142eef3d74c76c545da95ebe377f1b1b6910ab197612ab6eee6977beaa112abdb6edab5126fb0d53b9e806c52f9ec6296da925038a84f9baa1acbb97023e72fb226ef904ebcfaef01c23905e6b6cde9bd4629", &(0x7f00000004c0)=""/151, 0x0, 0x0, 0x0, 0x54, &(0x7f0000000200), &(0x7f0000000580)="94d2ffba969a8383b6ac64c5ce163e2edfefe921b22988a2cec28e6434d395f6cc7f94a94842d2cd6005ec928b60385c2e91f02c5f7eaa63805741420ac771c3e31dafaa4380caf2243d0de5831760e441b226b6", 0x0, 0x1000}, 0x48) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00', r5) read$snapshot(r1, &(0x7f0000000300)=""/138, 0x8a) 16:55:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x7a2) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x800) 16:55:17 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r3, 0x1f6f40b7b625a151, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa35c}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r5, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x88, r5, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe0}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x8001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2800000}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24040080}, 0x40040) syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00', r4) 16:55:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xe00) 16:55:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3f) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) 16:55:17 executing program 0: read$snapshot(0xffffffffffffffff, 0x0, 0x0) 16:55:17 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x7a2) 16:55:17 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) 16:55:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:17 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x2, 0x4182) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r2, 0x24}, 0x10) r3 = socket(0x2a, 0x800, 0x3) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 16:55:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf00) 16:55:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xe00) 16:55:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x124, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9641}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x24040001}, 0x20004040) 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x6000) 16:55:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x3f) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r3) 16:55:18 executing program 0: ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@security={'security\x00', 0xe, 0x4, 0x3c8, 0xffffffff, 0xf0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz0\x00', {0xde3b}}}}, {{@ipv6={@private1={0xfc, 0x1, [], 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff, 0xff000000, 0xff000000, 0x1fe0000ff], [0xffffffff, 0xffffff00, 0xff, 0xffffffff], 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x3c, 0x6, 0x2, 0x41}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x5}, {0x2, 0x2, 0x7}}}}, {{@ipv6={@loopback, @private2, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xff000000, 0xffffff00, 0x0, 0xffffffff], 'ipvlan1\x00', 'hsr0\x00', {}, {}, 0x2b, 0x8, 0x2, 0x50}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x0, 0x1, 0x0, [0x20, 0x8, 0x4, 0x5, 0x3ff, 0x4b1b, 0x7, 0x6, 0x1, 0x61, 0x1, 0x7, 0x86, 0x20, 0x0, 0x8], 0x7}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz1\x00', {0x2}}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) read$snapshot(0xffffffffffffffff, 0x0, 0x0) 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200)='nl80211\x00', r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x64, r3, 0x800, 0x70bd2a, 0xffff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x74}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x7, 0x2a, [@dsss={0x3, 0x1, 0x1}]}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x20000880) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) 16:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xa207) 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:18 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x6000) 16:55:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xffff, 0x428441) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r5) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000002c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080803ca0100000008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r9, @ANYBLOB="140002006e657564657673696d300000000000000800030001000000080003000100001000000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c0, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x4008840) getpgid(r2) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') 16:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf000) 16:55:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x5, 0x10001, 0x1, 0x191, r0, 0x401, [], 0x0, r0, 0x1, 0x0, 0x4}, 0x40) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)={0x14, 0x0, 0x100, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4884}, 0x2000c804) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="58000000cdb110455b969d3a6b9bf8f2de48a33ca9d83b7017a4eee55e31ddac4181f84b740bddabd3c0fee8c2f12b5698d90b00613fa9bd769f940fc8d0fefce84b8547ac2e2b4b5bacd43f306a88de607656cd50e8ce76087582a5cb920e825232a039620caaf163010000000000000025917902cfbb19d84aa012ad235e56d400046e88238bd24ca19af45b24e8ddea0c6e65c9068ca2d5bb9f6b17d230ec4099902716ab1961cad7d221565b5daeb0e00cb430d3045ea37cfd08aa7c24653281158a9654e4ef626dc4117e99807b676144d1d40ba9d049f6c7", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r3, @ANYBLOB="140002006e657464657673696d300000000000000800030001000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@map={0x18, 0x4, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x55}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x5}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x1, [], r4, 0xa, r5, 0x8, &(0x7f0000000100)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x3, 0xf6, 0x6}, 0x10, 0x0, r0}, 0x78) write$snapshot(r1, 0x0, 0x0) read$snapshot(r1, 0x0, 0x0) 16:55:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) 16:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x30000) 16:55:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x10000, 0x515900) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x8040) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfff, 0x100) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r5) 16:55:18 executing program 0: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x33, 0x2100) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) read$snapshot(r3, 0x0, 0x0) 16:55:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0xffff, 0x428441) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = getpgid(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f00000003c0)=0xe8) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r5) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000002c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="080803ca0100000008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r9, @ANYBLOB="140002006e657564657673696d300000000000000800030001000000080003000100001000000000", @ANYRES32=r10, @ANYBLOB="0c00018008000100", @ANYRES32=r9, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1c0, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x1}, 0x4008840) getpgid(r2) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/cgroup\x00') 16:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x34000) [ 1582.174868] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1582.220884] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) 16:55:18 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 16:55:18 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100), 0x4) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x124, 0x0, 0x8, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffff9}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffffc}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9641}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xff}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x10001}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0x124}, 0x1, 0x0, 0x0, 0x24040001}, 0x20004040) 16:55:18 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYRES16], 0x3c}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x2c, r4, 0x10, 0x8, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x646}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4815}, 0x4000004) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:18 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x400300) 16:55:18 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:18 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) [ 1582.424577] Restarting kernel threads ... done. [ 1582.466023] Restarting kernel threads ... done. 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', 0xffffffffffffffff) 16:55:19 executing program 1: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, 0xffffffffffffffff) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf0ffff) 16:55:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="589b3100", @ANYRES16=0x0, @ANYBLOB="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"], 0x258}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0xd4, 0x801) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00'}) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x40000) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@delqdisc={0x3a8, 0x25, 0x200, 0x70bd25, 0x7, {0x0, 0x0, 0x0, 0x0, {0x6, 0x4}, {0xc, 0x2}, {0xd, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @qdisc_kind_options=@q_qfg={0x8, 0x1, 'qfq\x00'}, @TCA_STAB={0x138, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x8, 0x5, 0x8a, 0x2, 0x7fffffff, 0x9, 0x1}}, {0x6, 0x2, [0x2]}}, {{0x1c, 0x1, {0x9, 0x9, 0x0, 0x4, 0x1, 0x480, 0x3, 0x4}}, {0xc, 0x2, [0xa44, 0x8, 0x4, 0x7ff]}}, {{0x1c, 0x1, {0xf9, 0x6, 0x5, 0x5, 0x1, 0xffffff11, 0x10001}}, {0x4}}, {{0x1c, 0x1, {0x8c, 0x7f, 0x6, 0x1d, 0x2, 0x3, 0x2, 0x7}}, {0x12, 0x2, [0x8, 0x6000, 0x7, 0x8, 0x3, 0xc484, 0x96]}}, {{0x1c, 0x1, {0x0, 0x4, 0x1, 0x5, 0x2, 0x20, 0xfffffffd, 0x1}}, {0x6, 0x2, [0x83]}}, {{0x1c, 0x1, {0x1, 0x88, 0x8, 0x4, 0x1, 0xffffffff, 0x10001, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x2, 0x0, 0x7, 0xffffffff, 0x1, 0x10, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x9513, 0x7, 0x0, 0x0, 0x9]}}, {{0x1c, 0x1, {0x7f, 0x8a, 0x4, 0xcc, 0x0, 0x20, 0x9, 0x1}}, {0x6, 0x2, [0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x20, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5e, 0x1, 0x200, 0xe6, 0x0, 0x9, 0x80000000, 0x6}}, {0x10, 0x2, [0x2, 0x8, 0x8, 0x5, 0x1ff, 0x0]}}, {{0x1c, 0x1, {0x20, 0x9, 0x7ad, 0x80, 0x1, 0x4, 0x3, 0x8}}, {0x14, 0x2, [0x400, 0x2fa, 0x9, 0x1000, 0x9, 0x0, 0x20, 0x5]}}, {{0x1c, 0x1, {0x9, 0x3, 0x1f, 0xdd, 0x1, 0x6a8d86e0, 0x6, 0x4}}, {0xc, 0x2, [0x7, 0x9016, 0x40, 0x4]}}, {{0x1c, 0x1, {0x45, 0x0, 0x8000, 0xc55, 0x1, 0x93f, 0x8000, 0xa}}, {0x18, 0x2, [0x5db, 0x400, 0x4, 0x9ba, 0x9, 0x5878, 0x1, 0x8, 0xfff, 0xd4ef]}}, {{0x1c, 0x1, {0x7, 0x1f, 0x1000, 0x2, 0x1, 0xa57, 0x6, 0x6}}, {0x10, 0x2, [0x8, 0x7f, 0x8, 0x8, 0x6f50, 0x6]}}, {{0x1c, 0x1, {0x9, 0x89, 0x8da6, 0x3, 0x2, 0x22, 0x5, 0x5}}, {0xe, 0x2, [0xffff, 0xd99, 0x6, 0x8000, 0x0]}}, {{0x1c, 0x1, {0xd5, 0x3, 0x1, 0x2, 0x2, 0x8, 0x6, 0x5}}, {0xe, 0x2, [0x1ff, 0x4, 0x4, 0x7f, 0x8]}}]}, @qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x44, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xa445, 0x7ff}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x4}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x126, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7fffffff}]}}, @TCA_RATE={0x6, 0x5, {0x1f, 0x4}}, @TCA_STAB={0x90, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x5, 0x1000, 0x0, 0x0, 0xadbd, 0x2, 0x9}}, {0x16, 0x2, [0x7b, 0x4, 0x2, 0xecfb, 0x5, 0x401, 0x9, 0x78, 0x6]}}, {{0x1c, 0x1, {0xd6, 0x0, 0x36fa, 0x83, 0x0, 0xfff, 0xfffffffe, 0x9}}, {0x16, 0x2, [0x3, 0x3ff, 0x7ff, 0xc134, 0x20, 0x5, 0x8, 0xdf7, 0xf3f]}}, {{0x1c, 0x1, {0x9, 0x38, 0x6, 0xfe000000, 0x1, 0x8000, 0x8, 0x2}}, {0x8, 0x2, [0x7f, 0x7]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x4008020}, 0x20000004) read$snapshot(r2, 0x0, 0x0) 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket(0x2, 0x6, 0x1000) syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r3, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1ffe00}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xab6c}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x38}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x104) read$snapshot(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 16:55:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 16:55:19 executing program 1: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x1000000) 16:55:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) getpgid(0x0) getpid() r1 = getpid() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="af7a20c3", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x48851) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) [ 1582.782226] Restarting kernel threads ... done. 16:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x2000000) 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffe}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x8880}, 0x8000) read$snapshot(r0, 0x0, 0x0) 16:55:19 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) 16:55:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = semget(0x1, 0x2, 0x603) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000080)=""/111) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:19 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x3000000) [ 1582.985941] Restarting kernel threads ... done. 16:55:19 executing program 4: r0 = socket(0x25, 0x1, 0x9) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 16:55:19 executing program 0: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r1) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r4, 0x0, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r2], 0x5c}}, 0x4040000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r5) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r6], 0x5c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x70, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x40) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x7c, 0x0, 0x504, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x4b}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x80000001}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}]}, 0x7c}}, 0x4801) r8 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r8, 0x0, 0x0) 16:55:19 executing program 1: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = semget(0x1, 0x2, 0x603) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000080)=""/111) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x4000000) 16:55:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x90000, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:19 executing program 1: syz_open_dev$loop(0x0, 0x100, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) [ 1583.167634] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = semget(0x1, 0x2, 0x603) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000080)=""/111) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) [ 1583.248133] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x4, 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0xbdee4927b8aec851) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x200, 0x40) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) 16:55:19 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:19 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:19 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x8478) 16:55:19 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x7000000) 16:55:19 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = semget(0x1, 0x2, 0x603) semctl$GETVAL(r2, 0x1, 0xc, &(0x7f0000000080)=""/111) semctl$IPC_RMID(r2, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:19 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x3, 0x40c02) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x1, &(0x7f0000000000)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x18, &(0x7f0000000240)=""/24, 0x41100, 0x1b, [], r2, 0x17, r1, 0x8, &(0x7f0000000100)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0x8, 0x3, 0x8000}, 0x10, 0xffffffffffffffff, r0}, 0x78) bind$802154_dgram(r1, &(0x7f0000000200)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) read$snapshot(r0, 0x0, 0x0) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x8000000) 16:55:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="c19b6f6b", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf255400000008000300", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000000000a00060008021100000000000a0006000802110000000000"], 0x40}, 0x1, 0x0, 0x0, 0x2004c090}, 0x40005) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x100) syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x1, 0x80000) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:55:20 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x9, 0x40400) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x2, [0x4, 0x8000], 0x8}, 0x10) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xe000000) 16:55:20 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xffffffc0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x160, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0x7, 0x6, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x101, 0x68, &(0x7f0000000180)=""/104, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x7fffffff, 0x3}, 0x10, 0x8233, r1}, 0x78) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r12) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 0: r0 = socket(0x25, 0x1, 0x9) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf000000) 16:55:20 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140d, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000044}, 0x4801) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x60000000) 16:55:20 executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x15, 0x4}, 0x14) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x484000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x20000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:20 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x9effffff) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = getpgid(0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x200140, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00'}, 0x10) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000380)=r4) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid\x00') r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) r6 = getpgid(0x0) getpgid(r6) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4010000", @ANYRES16=r5, @ANYBLOB="220025bd7000fedbdf2525000000080001007063690011000200303030303a30303a31302e300000000008008b00", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYBLOB="8c6b786a473a4c2de64b78de01f7aac4864f6c91757293054462f9e48f16800ef8e79733bd1ed07f214c0156094497dcf76af7c5abbab42f286c69fbccba", @ANYRESOCT=r3, @ANYRES32=r1, @ANYBLOB="080001007063690011000200303030303a30303a31302e300000000008008c00010000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=r2, @ANYBLOB], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r7 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x4, 0x2002) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r10, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x97}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x19}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}]}, 0x3c}}, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00', r7) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) 16:55:20 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xa2070000) 16:55:20 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:20 executing program 3: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) 16:55:20 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf0ffffff) 16:55:20 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "486c9574f1a73df73825f632c75a8b87"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4a}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x30000000}, 0x40840) write$snapshot(r2, 0x0, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r8, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r8) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:21 executing program 3: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xfffff000) 16:55:21 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) 16:55:21 executing program 3: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x200080, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xffffff7f) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) 16:55:21 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) 16:55:21 executing program 0: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 4: sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x24040000) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xffffff9e) 16:55:21 executing program 0: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xfffffff0) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 4: sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003680)='nl80211\x00', r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r9, 0x1, 0x0, 0x0, {{}, {@val={0x0, 0x1, 0x53}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x4008001) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000003740)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003700)={&(0x7f00000036c0)={0x28, r6, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xd2, 0x5f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="1a1410a02e2ef6440d9949bdfe9b1222972678d6d886ee627972cec8d042077fddc0e91f098c4eca903dadca1782354b3bb33914a979124cc2a8c8ee2258b77017b7dc18eca9eae4ee55594df1e94944a3da06252b79f6c0a8c54ae862ba1d19a2d0ecf4684d14f97be3f35ffbf3bfe72d3b3c591c", @ANYRES16=r4, @ANYBLOB="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"], 0x3490}, 0x1, 0x0, 0x0, 0x20008045}, 0x40090) 16:55:21 executing program 0: mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x3000000000000) 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:21 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) [ 1585.287634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1585.353680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 16:55:21 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:21 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x40030000000000) 16:55:21 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 16:55:21 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1000, 0xc0000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x9, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x0, 0x1, 0x3, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x2, 0xb, 0x3, 0x70, 0x4}, @map={0x18, 0x6, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0xc, 0x0, 0x7, 0xfffffffffffffff8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x47}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0x4889, 0x8d, &(0x7f0000000180)=""/141, 0x61780, 0x8, [], 0x0, 0x22, r0, 0x8, &(0x7f0000000100)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xa, 0xffffff81, 0x76fc}, 0x10, 0xffffffffffffffff, r0}, 0x78) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) 16:55:22 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) 16:55:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x4, 0x145000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf0ffffffffffff) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 16:55:22 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 16:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x100000000000000) 16:55:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000200), 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8001, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x5, 0x3, 0x1, 0xd0, 0x1, 0x4, [], 0x0, r3, 0x5, 0x2, 0x4}, 0x40) socket(0x1e, 0x6, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1000, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c8b, 0x0, 0x0, 0x0, 0xa2}, [@ldst={0x2, 0x2, 0x3, 0x1, 0xb, 0xffffffffffffffe0, 0x10}, @generic={0x9, 0x8, 0x1, 0x4, 0x2}, @func, @map={0x18, 0xb, 0x1, 0x0, r4}, @alu={0x7, 0x1, 0x1, 0xa, 0x0, 0xc, 0x4}, @jmp={0x5, 0x1, 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x3, 0x7, 0x4, 0x24, 0x4}, @alu={0x4, 0x1, 0x3, 0x1, 0x9, 0xffffffffffffffc0, 0x10}, @ldst={0x1, 0x2, 0x0, 0x4, 0x4, 0x80, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x20, 0x0, 0x0, 0x40f00, 0x13, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x743}, 0x10, 0xffffffffffffffff, r3}, 0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x54, 0x0, 0x28, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40814) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 1: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) 16:55:22 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 16:55:22 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xa5c9, 0x983182) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) read$dsp(r3, &(0x7f0000000000)=""/63, 0x3f) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r9, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r9, 0x80083314, &(0x7f00000001c0)) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x5c, r4, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xbe6b, 0x43}}}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xc000}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_IE={0xc, 0x2a, [@supported_rates={0x1, 0x6, [{0x12, 0x1}, {0xb}, {0x9}, {0x3}, {0x12}, {0x60}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x40055) 16:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x200000000000000) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000200), 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8001, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x5, 0x3, 0x1, 0xd0, 0x1, 0x4, [], 0x0, r3, 0x5, 0x2, 0x4}, 0x40) socket(0x1e, 0x6, 0x4) r4 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1000, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xd, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9c8b, 0x0, 0x0, 0x0, 0xa2}, [@ldst={0x2, 0x2, 0x3, 0x1, 0xb, 0xffffffffffffffe0, 0x10}, @generic={0x9, 0x8, 0x1, 0x4, 0x2}, @func, @map={0x18, 0xb, 0x1, 0x0, r4}, @alu={0x7, 0x1, 0x1, 0xa, 0x0, 0xc, 0x4}, @jmp={0x5, 0x1, 0x1, 0x6, 0x0, 0xfffffffffffffff8, 0xfffffffffffffff0}, @alu={0x7, 0x0, 0x3, 0x7, 0x4, 0x24, 0x4}, @alu={0x4, 0x1, 0x3, 0x1, 0x9, 0xffffffffffffffc0, 0x10}, @ldst={0x1, 0x2, 0x0, 0x4, 0x4, 0x80, 0xffffffffffffffff}]}, &(0x7f0000000280)='syzkaller\x00', 0x20, 0x0, 0x0, 0x40f00, 0x13, [], 0x0, 0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x2, 0x743}, 0x10, 0xffffffffffffffff, r3}, 0x78) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x54, 0x0, 0x28, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x40814) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x300000000000000) 16:55:22 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x15, 0x4}, 0x14) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x484000, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x20000, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x104, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1f, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@multicast1}}, &(0x7f0000000580)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000880)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xffffffc0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)={0x160, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_ext={0x1c, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@alu={0x4, 0x0, 0x7, 0x6, 0x5, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000040)='syzkaller\x00', 0x101, 0x68, &(0x7f0000000180)=""/104, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0xb, 0x7fffffff, 0x3}, 0x10, 0x8233, r1}, 0x78) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r12) 16:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x400000000000000) 16:55:22 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) getpgid(0x0) getpid() r1 = getpid() r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/uts\x00') r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="af7a20c3", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0004000000080001007063690011000200303030303a30303a31302e300000000008008a00", @ANYRES32=r2, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0xc004}, 0x48851) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x300) 16:55:22 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xfc, 0x36182) r1 = getpgid(0xffffffffffffffff) r2 = syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x400, 0x28200) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) 16:55:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x700000000000000) 16:55:22 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x104, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1f, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:22 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:22 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') write$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 16:55:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20900, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x300000c, 0x12, r2, 0x0) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x800000000000000) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x2b, 0x5, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r8 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r11 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x174, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x44) 16:55:23 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x401, 0x256200) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x2b, 0x5, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r8 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r11 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x174, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x44) 16:55:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xe00000000000000) 16:55:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x5, 0x10000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xb0, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r7) 16:55:23 executing program 0: openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) r1 = socket(0x2b, 0x5, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r8 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r11 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r11) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x174, r2, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x10}, 0x44) 16:55:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf00000000000000) 16:55:23 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(0x0, 0x2, 0x0) 16:55:23 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x240, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9f0360b80a88f2d1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20004090}, 0x10004) write$snapshot(r2, 0x0, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000000)={0x800, 0x8}) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r7 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r7) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) 16:55:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x6000000000000000) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(0x0, 0x2, 0x0) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r6) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000600)=0xe8) 16:55:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4fdade5c26908f67}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00032cbd7000fbdbdf251c00000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004840}, 0x8000) 16:55:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf00000000000000) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x9effffff00000000) 16:55:23 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(0x0, 0x2, 0x0) 16:55:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x200000) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r6) 16:55:23 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c03, r1) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xa207000000000000) 16:55:23 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) 16:55:23 executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x0, 0x0) 16:55:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') socket$nl_generic(0x10, 0x3, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xbc37cc21411479ab}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x1401, 0x100, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048080}, 0x4008090) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x12200, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r2, 0x330f, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast2, @in6=@ipv4={[], [], @dev}}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000080)=0xe8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x6, 0x0}, 0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x141062, 0x0) ioctl$SNAPSHOT_S2RAM(r5, 0x330b) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r4}, 0x4) 16:55:24 executing program 3: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0) mmap$dsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(0x0, 0x2, 0x0) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xf0ffffff00000000) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 16:55:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c01, r1) 16:55:24 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c09, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @initdev}}, &(0x7f0000000100)=0x14) 16:55:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xffffff7f00000000) 16:55:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c01, r1) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c01, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1000, 0x480000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00', 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x9c, r1, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x24040041}, 0x880) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') write$snapshot(0xffffffffffffffff, &(0x7f0000000000)="f1dc877dea6fb685f0b8730616a6e490f1d25f03e4122adaac4bfd6efbd1a8d6ac9592fb9dde16da421d529e", 0x2c) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r2) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r5 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) 16:55:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xffffffff00000000) 16:55:24 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c01, r1) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c01, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r3 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x34, 0x3}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040821) 16:55:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 4: sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3ff, 0x3e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200c0000}, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000003c0)='gtp\x00', r3) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xb, 0xcc, 0xf6e0, 0x7, 0x3c, 0xffffffffffffffff, 0x10001, [], r4, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x40) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 16:55:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c01, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x4ec2, 0x201840) 16:55:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0xfffffffffffff000) 16:55:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 16:55:24 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r3, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="b70000496e1104ffb5b34cfa8c956cf571efd2202cd981abeddfa197c59617d344d4b6ba99ca1502f0efa011b54ddeefa4d96a9739aadc74e480971fa872d2de772578c7671943ce7ed9de6229b1018e37a3", @ANYRES16=r3, @ANYBLOB="10002cbd7000ffdbdf25050000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e300000000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x88}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000804) 16:55:24 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r1) r3 = socket(0x27, 0xa, 0x4) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0000000004008ffa00000000000039d1369acffc9eb4d6f6f4083a3490f544b1546760cf8e553c5f685efe83adab38e593fb5c7b861e6664c4deb2132d100b47b7c0082b9612cb192905b7a5219bd2164dd06ff2ea918ca9ff0f6d8d06e2323ebf905b122adeed75eed93617"], 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x4c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x0, 0x0, 0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x4008000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c004}, 0x40) 16:55:24 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:24 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 16:55:24 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:24 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = socket(0x22, 0x1, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00', r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x4000084) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00', r2) 16:55:25 executing program 0: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) 16:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032cbd7000fddbdf250e000000070000000000000040000000080007000700000006000f0000040000"], 0x30}}, 0x4c800) 16:55:25 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4f6cc552", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 4: ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000000)) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r1, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:25 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0xc000, 0x0) 16:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x57}, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x27}}}}, ["", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c010}, 0x8810) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}}, 0x0) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0xc000, 0x0) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 3: read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x1000, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', r2) 16:55:25 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vcsa(&(0x7f00000004c0)='/dev/vcsa#\x00', 0x6, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x170, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_NODE_ID={0x4d, 0x3, "28e469c6d80107db64dd9d774995b1e74d3765575c6749a6557888b5f6d97aa23cb106c29b528e0e092987bf913856a5e80d1611af5a7839bd8521801b56ee0e232dbb12b30a518af6"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "90e78958ba6aa6c90808ca5a4ba3a30316fc96b3320c6639162a7634"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf395}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf2f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x447}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000800}, 0x404c0c9) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14200000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80, 0x61}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004004}, 0x20000021) 16:55:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0xc000, 0x0) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x100, 0x200602) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 16:55:25 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="000225bd7000fec4e77d0fc024ff71fe151578c2f48593dbdf25030000000800310003000000"], 0x1c}}, 0x4040000) 16:55:25 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) socket(0x2b, 0x5, 0x1) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 1: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) socket(0x2b, 0x5, 0x1) 16:55:25 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) openat$cgroup_freezer_state(r0, &(0x7f0000000040)='freezer.state\x00', 0x2, 0x0) 16:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x8, 0xd8476dfb1ba2bd0e, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 16:55:25 executing program 3: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:25 executing program 1: socket(0x2b, 0x5, 0x1) 16:55:25 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x24008054) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r4, @ANYBLOB="140002006e657464657673696d300000000000000800030001000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB="f2048696b8887f3fc5d14fa01020a302cf6a4f1901ffa8d79553adb3f6706012476a72b588fcc4fc8dcb320edfaf56e16e0534b021839a610304d4053a60122f48d0f0f11a4d95708fec6345af154f3e6be8c4b56b28cc80f04dd1efc4682ed4728d4109fa9e384a9833a2891e202eb37c4ae00f9a474a9639c1761967d36ebb"], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4a}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000084) 16:55:25 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) 16:55:25 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8f38318e93c6fa15}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r1, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x80, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}}, 0xc040) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:26 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:26 executing program 1: socket(0x0, 0x5, 0x1) 16:55:26 executing program 0: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) socket(0x2b, 0x5, 0x1) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00', r0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x30, r2, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB="017f00000000a00e00000b000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x302, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00', r1) r6 = syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x400, 0x8002) sendmsg$IPVS_CMD_DEL_DEST(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x108, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x101}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_macvtap\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg2\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r5, 0x800, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffb}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 16:55:26 executing program 4: setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x808040}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x80, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa709}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getuid() ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000200)=0x8) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 3: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:26 executing program 1: socket(0x0, 0x5, 0x1) 16:55:26 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYBLOB="000225bd7000fec4e77d0fc024ff71fe151578c2f48593dbdf25030000000800310003000000"], 0x1c}}, 0x4040000) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 16:55:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x43}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xf4d}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004015}, 0xc000) 16:55:26 executing program 1: socket(0x0, 0x5, 0x1) [ 1589.875598] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032cbd7000fddbdf250e000000070000000000000040000000080007000700000006000f0000040000"], 0x30}}, 0x4c800) 16:55:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) 16:55:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x0) [ 1589.947552] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:26 executing program 4: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x2000040) r1 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x700, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 1: socket(0x2b, 0x0, 0x1) 16:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x200) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd2d, 0x9, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 16:55:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 1: socket(0x2b, 0x0, 0x0) 16:55:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffdef) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 4: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file1\x00', 0x0, 0x20}, 0x10) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)=r0) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:55:26 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000e17c08a4130efc93d0fd5736ad86d88a9bd31fa2d4f8ed767f881aee0ff733846f1086ea1af74f4a4d2f33"], 0x14}}, 0x0) 16:55:26 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x2, r1) 16:55:26 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0x2000038a) 16:55:26 executing program 1: socket(0x2b, 0x0, 0x0) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f0000000000)) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:55:26 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x2000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4f}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40004) 16:55:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:26 executing program 1: socket(0x2b, 0x0, 0x0) 16:55:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x8a00) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r3, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x88, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 16:55:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfdef) 16:55:27 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, 0x0, 0x4) 16:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf25010000000000080008410000004c001800000006696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0xd4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000002c0)={@private2, 0x0}, &(0x7f0000000300)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x10}, 0x81) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780)='ethtool\x00', r1) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000001100)={0x3bc, 0x0, 0x102, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x124, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "792c523046afab880fe75fe8cd992148274339571d0f64c56c9e27"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "1ee92ccf3fed2e7bff65a5913a4d538f77fb3fc6a97a"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "e60fce86eecad0253fbc823bd5a2811168487f04f08a8a9238d0"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "8b7e921dfefff675263d531046d8680b6329dffa6145f3fe705872327fe17aaae8a0"}}]}, @TIPC_NLA_SOCK={0x8c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8b4a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe39}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8b}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x84}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5720}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x25000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb534fc8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xd5b1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8c3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_BEARER={0xb4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x28}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x3, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}]}, 0x3bc}, 0x1, 0x0, 0x0, 0x4004004}, 0x4004000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000680)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x44, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffffffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x40000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x64, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c890000", @ANYRES16=r3, @ANYBLOB="010000000000020000000300000005002d0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x30008844}, 0x40001) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5e}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xffffffc1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4008004) 16:55:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:27 executing program 0 (fault-call:0 fault-nth:0): socket(0x2b, 0x0, 0x1) 16:55:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x10481, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:27 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:27 executing program 3 (fault-call:0 fault-nth:0): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1590.637284] FAULT_INJECTION: forcing a failure. [ 1590.637284] name failslab, interval 1, probability 0, space 0, times 0 16:55:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) [ 1590.708387] CPU: 1 PID: 21936 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 1590.716327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1590.725698] Call Trace: [ 1590.728325] dump_stack+0x1fc/0x2ef [ 1590.731983] should_fail.cold+0xa/0xf [ 1590.735819] ? setup_fault_attr+0x200/0x200 [ 1590.740172] ? lock_acquire+0x170/0x3c0 [ 1590.744168] __should_failslab+0x115/0x180 [ 1590.748421] should_failslab+0x5/0x10 [ 1590.752243] kmem_cache_alloc+0x277/0x370 [ 1590.757447] ? sock_destroy_inode+0x60/0x60 [ 1590.761779] sock_alloc_inode+0x19/0x250 [ 1590.765853] ? sock_destroy_inode+0x60/0x60 [ 1590.770190] alloc_inode+0x5d/0x180 [ 1590.773835] new_inode_pseudo+0x14/0xe0 [ 1590.777821] sock_alloc+0x3c/0x260 [ 1590.781372] __sock_create+0xba/0x740 [ 1590.785188] __sys_socket+0xef/0x200 [ 1590.788916] ? move_addr_to_kernel+0x70/0x70 [ 1590.793342] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1590.798825] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1590.803879] __x64_sys_socket+0x6f/0xb0 16:55:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x700, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1590.807869] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1590.812465] do_syscall_64+0xf9/0x620 [ 1590.816362] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1590.821555] RIP: 0033:0x466459 [ 1590.824752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1590.843748] RSP: 002b:00007f0823c63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1590.851473] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 16:55:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x94, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x10, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22, 0x29}}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x44045}, 0x4000000) 16:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x70bd2a}, 0x14}}, 0x20040080) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7e3d}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r4], 0x5c}}, 0x0) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440)='802.15.4 MAC\x00', 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x42080) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r7) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r8], 0x5c}}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x54, r2, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x4}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x54}, 0x1, 0x0, 0x0, 0x48001}, 0x40000) [ 1590.858752] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000002b [ 1590.866030] RBP: 00007f0823c631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1590.873317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1590.880605] R13: 00007ffcd50a478f R14: 00007f0823c63300 R15: 0000000000022000 [ 1590.882828] FAULT_INJECTION: forcing a failure. [ 1590.882828] name failslab, interval 1, probability 0, space 0, times 0 [ 1590.902499] socket: no more sockets 16:55:27 executing program 0 (fault-call:0 fault-nth:1): socket(0x2b, 0x0, 0x1) 16:55:27 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x11d000) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) [ 1590.993955] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1591.010221] CPU: 0 PID: 21954 Comm: syz-executor.3 Not tainted 4.19.183-syzkaller #0 [ 1591.018143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.027514] Call Trace: [ 1591.030126] dump_stack+0x1fc/0x2ef [ 1591.033777] should_fail.cold+0xa/0xf [ 1591.037610] ? setup_fault_attr+0x200/0x200 [ 1591.039494] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1591.041952] ? lock_acquire+0x170/0x3c0 [ 1591.041975] __should_failslab+0x115/0x180 [ 1591.058743] should_failslab+0x5/0x10 [ 1591.062559] kmem_cache_alloc+0x277/0x370 [ 1591.066730] getname_flags+0xce/0x590 [ 1591.070467] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1591.070546] do_sys_open+0x26c/0x520 [ 1591.082837] ? filp_open+0x70/0x70 [ 1591.085399] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1591.086394] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1591.086411] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1591.086433] ? do_syscall_64+0x21/0x620 [ 1591.109343] do_syscall_64+0xf9/0x620 [ 1591.113177] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1591.118379] RIP: 0033:0x466459 [ 1591.121580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.140491] RSP: 002b:00007fd9ecca5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1591.148219] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1591.155505] RDX: 000000000000c000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1591.162795] RBP: 00007fd9ecca51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.170085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.177372] R13: 00007ffec2ab367f R14: 00007fd9ecca5300 R15: 0000000000022000 16:55:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x202) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x282140) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00'}) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) 16:55:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00', 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc9}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x7cd, 0x0, 0x40, 0xfff]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) 16:55:27 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11aa, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x5, 0x2, 0x0, r0}, @jmp={0x5, 0x1, 0x4, 0xb, 0x2, 0x80, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xa, 0xa, 0x6, 0xfffffffffffffff8, 0x10}, @generic={0x5, 0xb, 0xc, 0x6, 0x7137}, @map_val={0x18, 0x2, 0x2, 0x0, r0}, @map={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x31, &(0x7f0000000300)=""/49, 0x40f00, 0x0, [], 0x0, 0x18, r0, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0xc, 0x7fff, 0x8}, 0x10, 0x305f7, r0}, 0x78) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$bt_hci(r0, &(0x7f0000000200)={0x1f, 0x3, 0x3}, 0xfffffffffffffd94) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r4 = socket(0x1, 0x1, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf251c00000008000300", @ANYRES32=0x0, @ANYBLOB="2200854c89ef507128a501fdabe1fafaaab0ac5ed70adf69"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00', r5) 16:55:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x2000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1591.196690] FAULT_INJECTION: forcing a failure. [ 1591.196690] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.212609] CPU: 0 PID: 21966 Comm: syz-executor.0 Not tainted 4.19.183-syzkaller #0 [ 1591.220530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.229910] Call Trace: [ 1591.232532] dump_stack+0x1fc/0x2ef [ 1591.236289] should_fail.cold+0xa/0xf [ 1591.240108] ? setup_fault_attr+0x200/0x200 [ 1591.244451] ? lock_acquire+0x170/0x3c0 [ 1591.248447] __should_failslab+0x115/0x180 [ 1591.252702] should_failslab+0x5/0x10 [ 1591.256516] kmem_cache_alloc_trace+0x284/0x380 [ 1591.261191] ? kmem_cache_alloc+0x315/0x370 [ 1591.265528] sock_alloc_inode+0x5f/0x250 [ 1591.269607] ? sock_destroy_inode+0x60/0x60 [ 1591.273943] alloc_inode+0x5d/0x180 [ 1591.277581] new_inode_pseudo+0x14/0xe0 [ 1591.281568] sock_alloc+0x3c/0x260 [ 1591.285125] __sock_create+0xba/0x740 [ 1591.288943] __sys_socket+0xef/0x200 [ 1591.292669] ? move_addr_to_kernel+0x70/0x70 [ 1591.297095] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1591.302470] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1591.307509] __x64_sys_socket+0x6f/0xb0 [ 1591.311534] ? lockdep_hardirqs_on+0x3a8/0x5c0 [ 1591.316131] do_syscall_64+0xf9/0x620 [ 1591.319946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1591.325248] RIP: 0033:0x466459 [ 1591.328451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:55:27 executing program 3 (fault-call:0 fault-nth:1): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x25dfdbff}, 0x14}}, 0x24008000) 16:55:27 executing program 1: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) write$snapshot(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0)='nl802154\x00', 0xffffffffffffffff) ioctl$SNAPSHOT_S2RAM(r1, 0x330b) read$snapshot(r0, &(0x7f0000000000)=""/161, 0xa1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16:55:27 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7ff, 0x40000) write$cgroup_freezer_state(r2, &(0x7f0000000040)='THAWED\x00', 0x7) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x178, r3, 0xa08, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x69}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x99, 0x2a, [@fast_bss_trans={0x37, 0x8e, {0x40, 0x3, "38c8f694a5ccb81dba899ce3c03dbfe6", "2c2ccbe7c59565247b6a5b5e2065e274629d18701f893bae4cc13dd684eb42ab", "cf8818afa8342538f2c4bc421e30eaf389f001703057b4a2b51bd4aad00be222", [{0x1, 0xb, "39e1820406c5667d18ce29"}, {0x1, 0x16, "0a0c79b622e67d5e6a32b04a209dfe1145b1227695ec"}, {0x4, 0x15, "4a0a8a8e8a502bfb95d2f4ec21471bf3544ff486e8"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x0, 0x6}}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_IE={0x99, 0x2a, [@chsw_timing={0x68, 0x4, {0x7, 0x7f}}, @tim={0x5, 0x6e, {0x8, 0x25, 0x8, "f971d9b131fc65366dbbf75505001e3cf1104caaf7db783bfe3e9a12507bfd07673c79fced38512e329c0386e9f8f46826e4136ced1a3fffb5b2fb6de6343b8706004281eca1c8e93a2178f14be87e99f924c4a25f3b9ae51d5b52a9d3bd193ce1c3041e508b6db6b57062"}}, @mic={0x8c, 0x18, {0xd2f, "6676ac0974f5", @long="f67130f59b5055c0b990e9240c2b5420"}}, @channel_switch={0x25, 0x3, {0x0, 0xb6, 0x1f}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004) r4 = getpid() syz_open_procfs$namespace(r4, &(0x7f0000000380)='ns/net\x00') [ 1591.347364] RSP: 002b:00007f0823c63188 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1591.355092] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1591.362378] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000002b [ 1591.369663] RBP: 00007f0823c631d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.376952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.384240] R13: 00007ffcd50a478f R14: 00007f0823c63300 R15: 0000000000022000 [ 1591.396730] socket: no more sockets 16:55:27 executing program 0 (fault-call:0 fault-nth:2): socket(0x2b, 0x0, 0x1) 16:55:27 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x24000004) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00', r0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x4) 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x1000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 0: socket(0x2b, 0x0, 0x1) 16:55:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000000)) 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x30084) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x148, 0x0, 0x780c42b1cebb58d0, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x401}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x800}, {0x6, 0x16, 0x7fff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8, 0xb, 0x7}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0xb, 0xffffffe0}, {0x6, 0x16, 0x7f}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x1ff}}]}, 0x148}}, 0x40000d0) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) [ 1591.540682] FAULT_INJECTION: forcing a failure. [ 1591.540682] name failslab, interval 1, probability 0, space 0, times 0 [ 1591.618034] CPU: 1 PID: 22006 Comm: syz-executor.3 Not tainted 4.19.183-syzkaller #0 [ 1591.625962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1591.635328] Call Trace: [ 1591.637947] dump_stack+0x1fc/0x2ef [ 1591.641597] should_fail.cold+0xa/0xf [ 1591.645426] ? setup_fault_attr+0x200/0x200 [ 1591.649765] ? lock_acquire+0x170/0x3c0 [ 1591.653765] __should_failslab+0x115/0x180 [ 1591.658028] should_failslab+0x5/0x10 [ 1591.661846] kmem_cache_alloc+0x277/0x370 [ 1591.666016] __alloc_file+0x21/0x330 [ 1591.669749] alloc_empty_file+0x6d/0x170 [ 1591.673839] path_openat+0xe9/0x2df0 [ 1591.677569] ? __lock_acquire+0x6de/0x3ff0 [ 1591.681831] ? check_preemption_disabled+0x41/0x280 [ 1591.686866] ? path_lookupat+0x8d0/0x8d0 [ 1591.690946] ? mark_held_locks+0xf0/0xf0 [ 1591.695027] ? mark_held_locks+0xf0/0xf0 [ 1591.699104] ? proc_fail_nth_write+0x95/0x1d0 [ 1591.703610] do_filp_open+0x18c/0x3f0 [ 1591.707419] ? may_open_dev+0xf0/0xf0 [ 1591.711232] ? __alloc_fd+0x28d/0x570 16:55:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) [ 1591.715050] ? lock_downgrade+0x720/0x720 [ 1591.719207] ? lock_acquire+0x170/0x3c0 [ 1591.723197] ? __alloc_fd+0x34/0x570 [ 1591.726925] ? do_raw_spin_unlock+0x171/0x230 [ 1591.731431] ? _raw_spin_unlock+0x29/0x40 [ 1591.735592] ? __alloc_fd+0x28d/0x570 [ 1591.739420] do_sys_open+0x3b3/0x520 [ 1591.743153] ? filp_open+0x70/0x70 [ 1591.746713] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1591.752099] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1591.757135] ? do_syscall_64+0x21/0x620 [ 1591.761131] do_syscall_64+0xf9/0x620 [ 1591.764946] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1591.770145] RIP: 0033:0x466459 [ 1591.773348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1591.792262] RSP: 002b:00007fd9ecca5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1591.799997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1591.807289] RDX: 000000000000c000 RSI: 0000000020000000 RDI: ffffffffffffff9c 16:55:28 executing program 3 (fault-call:0 fault-nth:2): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x50, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}}, 0x4040011) r4 = socket(0x0, 0x80002, 0xe79) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000d00)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00', r5) sendmsg$TIPC_CMD_GET_NETID(r6, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20040000) [ 1591.814576] RBP: 00007fd9ecca51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1591.821859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1591.829142] R13: 00007ffec2ab367f R14: 00007fd9ecca5300 R15: 0000000000022000 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x7000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 1: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x3, 0x20c0) r0 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x100, 0x10000) read$snapshot(r0, &(0x7f0000000000)=""/138, 0x8a) 16:55:28 executing program 0: socket(0x2, 0x0, 0x1) 16:55:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000680)={0x368, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xc00000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x40}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1800}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x97}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xec}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6687}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_NODE={0x140, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4c, 0x3, "2b80e76fc2dd22f62b476597602b264631d72f0765837a2edd2f3df3d94a9b40cbf5194f588de1b24e50f8498fc0f94ba9317c9b3bf2cd2dd1ff895f789862f9f21d100db61d44b6"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "c45307984007489320660dbe19b5018a08845e1e04ab2bfe6b6ccdfa72e0d163ece1a52de6eb4d03ceb917dc14103072b6db64f15e5d8bafcf37540ec89f08befcee097c39bb7daf89d8b29d5829cfe754a44d009a3f185d226fe4838d8aa06fa1c343bccaa2e7463183ede2626f6c9b8016b36707ecf098dfd141c26144f4563d60540cead43a50bb0a86faef090feeb8f7a2f37119ad49c9542d185093e6ff9783ebd4dd675f3383a4eb68d7d907f6f5a56daff17fb198dbc3115183f0902328852be59c8bdb8b54e918cf5bed3bd3de2ad80582862f8a591887d647"}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x17c}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x100, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "f8175a02a1b62977c9c137b30b782ef0d6386e90d3c3dba540fd7b0369ddc1467bc024b1cc760cfcb63119ed4015972d4742a5a0b122c852dbd23403beefba367fa5d2a134f38f06aad35822de42c49a9eb567f09d71c385cbab8b2ed992430a31193f9f8f23a6a3d89a0d9b90a57e0a22501793097782f143daead8072653aed27cd70e3bcfdef45174856fba2ffee7d2841b419c790f02b6847114ffdd9682ea3fd84d3dae5ed90015a4660ef040414583e59e189d05bd1284e303621b76e6b6f8d131cadb46c015754d57df0e5b6d385bf69da1f5cd07d9b0f771c09dec1cbb663af116d6b68f300f9d3535b7b79d1a3b8f"}]}]}, 0x368}, 0x1, 0x0, 0x0, 0x2040045}, 0x200400a1) openat$cgroup_freezer_state(r1, &(0x7f0000000000)='freezer.state\x00', 0x2, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r4) 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) [ 1591.955904] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1591.979744] FAULT_INJECTION: forcing a failure. [ 1591.979744] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.029667] CPU: 0 PID: 22046 Comm: syz-executor.3 Not tainted 4.19.183-syzkaller #0 [ 1592.037601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.046969] Call Trace: [ 1592.049594] dump_stack+0x1fc/0x2ef [ 1592.053250] should_fail.cold+0xa/0xf [ 1592.057078] ? setup_fault_attr+0x200/0x200 [ 1592.061422] ? lock_acquire+0x170/0x3c0 [ 1592.065419] __should_failslab+0x115/0x180 [ 1592.066739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1592.069672] should_failslab+0x5/0x10 [ 1592.069691] kmem_cache_alloc+0x277/0x370 [ 1592.069718] __alloc_file+0x21/0x330 [ 1592.090998] alloc_empty_file+0x6d/0x170 [ 1592.095089] path_openat+0xe9/0x2df0 [ 1592.098832] ? __lock_acquire+0x6de/0x3ff0 [ 1592.103095] ? check_preemption_disabled+0x41/0x280 [ 1592.108130] ? path_lookupat+0x8d0/0x8d0 [ 1592.112216] ? mark_held_locks+0xf0/0xf0 [ 1592.116297] ? proc_fail_nth_write+0x95/0x1d0 [ 1592.120819] do_filp_open+0x18c/0x3f0 [ 1592.124635] ? may_open_dev+0xf0/0xf0 [ 1592.128445] ? __alloc_fd+0x28d/0x570 [ 1592.132265] ? lock_downgrade+0x720/0x720 [ 1592.136426] ? lock_acquire+0x170/0x3c0 [ 1592.140412] ? __alloc_fd+0x34/0x570 [ 1592.144147] ? do_raw_spin_unlock+0x171/0x230 [ 1592.148657] ? _raw_spin_unlock+0x29/0x40 [ 1592.152829] ? __alloc_fd+0x28d/0x570 [ 1592.156659] do_sys_open+0x3b3/0x520 [ 1592.160390] ? filp_open+0x70/0x70 [ 1592.163953] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1592.169339] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1592.174370] ? do_syscall_64+0x21/0x620 [ 1592.178361] do_syscall_64+0xf9/0x620 [ 1592.182180] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1592.187382] RIP: 0033:0x466459 [ 1592.190584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.209586] RSP: 002b:00007fd9ecca5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1592.217312] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 16:55:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x240, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x993c}]}, @NL802154_ATTR_SEC_DEVKEY={0xc4, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xda8d0236e73f650c}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x128, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7fffffff}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x240}, 0x1, 0x0, 0x0, 0x8040}, 0x40010) 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 0: socket(0x2c, 0x0, 0x1) 16:55:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00', r0) [ 1592.224596] RDX: 000000000000c000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1592.231878] RBP: 00007fd9ecca51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.239155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.246437] R13: 00007ffec2ab367f R14: 00007fd9ecca5300 R15: 0000000000022000 16:55:28 executing program 3 (fault-call:0 fault-nth:3): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:28 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio1\x00', 0x288000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f00000003c0)=0xee3) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x9) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa9, 0x440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00', 0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x8000, 0x628880) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x7ec93251) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00', r3) ioctl$LOOP_SET_CAPACITY(r3, 0x4c07) r7 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x400180) ioctl$BLKBSZGET(r7, 0x80081270, &(0x7f0000000300)) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00032dbd7000ffdbdf251c00000008000300acfd7ef2d18891d12daab8d949b8208612f3c420da789a34b725c05f27bc0573b3a11444362cf6d3c4fb4c543a5e13f79e012b91b4a91db3fb06121eb05d8ed061594cbefdc5bb10434bb06a95c7891f2e1bf1fc28c478e0018a44c7", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x100080c1) 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x92e119a32a288044, 0xd, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1000}, [@jmp={0x5, 0x1, 0x9, 0xb, 0x6, 0x2, 0xfffffffffffffff0}, @ldst={0x3, 0x1, 0x2, 0xa, 0x6, 0xffffffffffffffe0, 0x8}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3bf2030d, 0x0, 0x0, 0x0, 0xc5}, @jmp={0x5, 0x1, 0xd, 0x1, 0x4, 0x30, 0xfffffffffffffff0}]}, &(0x7f0000000200)='GPL\x00', 0x1, 0x1000, &(0x7f00000003c0)=""/4096, 0x40f00, 0x8, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x5, 0xf3, 0xf92986d}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x1, 0x4, &(0x7f0000000000)=@raw=[@exit, @exit, @ldst={0x3, 0x3, 0x0, 0x0, 0x2, 0x6, 0x1}, @jmp={0x5, 0x0, 0x9, 0x9, 0xa, 0x18, 0x8}], &(0x7f0000000040)='GPL\x00', 0xc0, 0x7d, &(0x7f0000000080)=""/125, 0x41000, 0x2, [], 0x0, 0x14, r1, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x4, 0x8, 0x5}, 0x10, 0xffffffffffffffff, r2}, 0x78) 16:55:28 executing program 0: socket(0x2b, 0xa, 0x1) 16:55:28 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x230, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0xfff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8}, {0x6, 0x11, 0xff}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffe0}, {0x6, 0x11, 0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3ff}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x43}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10001}, {0x6, 0x11, 0xdc}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd73c}, {0x6, 0x11, 0x1f}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3f}, {0x6, 0x11, 0x6494}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0xb8d}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x3ff}}]}, 0x230}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="408bf398", @ANYRES16=r1, @ANYBLOB="0100080000000000000003000000"], 0x14}}, 0x0) 16:55:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:28 executing program 4: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0xfffffffffffffffe, 0x4002) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x94202) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0xc138, 0x0) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) 16:55:29 executing program 1: r0 = socket(0xa, 0x4, 0x2) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00', 0xffffffffffffffff) r2 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0xfffffffffffffff7, 0x289c742cf0edaf69) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000003c0)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fcdbdf25010080000000000009410000004c001800000008657468000043356a70d0f1ccf6000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff2d528d724de0ce757673d7c70872f69cef275b78245033d8531ab19978cfb7d62eea488a523c130a8e06eb7ade923aecbaed4b6ceaddbf2e1917ea02afb3e43f6e052a32c0a5eeddc3b12478c600"/200], 0x68}, 0x1, 0x0, 0x0, 0x4004005}, 0x4008841) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x400c01) read$snapshot(r4, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r5 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x410000) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280)='NLBL_MGMT\x00', 0xffffffffffffffff) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f0000000080)) [ 1592.466398] FAULT_INJECTION: forcing a failure. [ 1592.466398] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.512434] CPU: 0 PID: 22094 Comm: syz-executor.3 Not tainted 4.19.183-syzkaller #0 [ 1592.520368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.529741] Call Trace: [ 1592.532357] dump_stack+0x1fc/0x2ef [ 1592.536006] should_fail.cold+0xa/0xf [ 1592.539829] ? setup_fault_attr+0x200/0x200 [ 1592.544171] ? lock_acquire+0x170/0x3c0 [ 1592.548165] __should_failslab+0x115/0x180 [ 1592.552417] should_failslab+0x5/0x10 [ 1592.556231] kmem_cache_alloc_trace+0x284/0x380 [ 1592.560919] apparmor_file_alloc_security+0x394/0xad0 [ 1592.566121] ? apparmor_file_receive+0x160/0x160 [ 1592.570895] ? __alloc_file+0x21/0x330 [ 1592.574809] security_file_alloc+0x40/0x90 [ 1592.579064] __alloc_file+0xc9/0x330 [ 1592.582801] alloc_empty_file+0x6d/0x170 [ 1592.586880] path_openat+0xe9/0x2df0 [ 1592.590609] ? __lock_acquire+0x6de/0x3ff0 [ 1592.594894] ? check_preemption_disabled+0x41/0x280 [ 1592.599923] ? path_lookupat+0x8d0/0x8d0 [ 1592.603999] ? mark_held_locks+0xf0/0xf0 [ 1592.608074] ? proc_fail_nth_write+0x95/0x1d0 [ 1592.612589] do_filp_open+0x18c/0x3f0 [ 1592.616402] ? may_open_dev+0xf0/0xf0 [ 1592.620217] ? __alloc_fd+0x28d/0x570 [ 1592.624039] ? lock_downgrade+0x720/0x720 [ 1592.628201] ? lock_acquire+0x170/0x3c0 [ 1592.632188] ? __alloc_fd+0x34/0x570 [ 1592.636010] ? do_raw_spin_unlock+0x171/0x230 [ 1592.640516] ? _raw_spin_unlock+0x29/0x40 [ 1592.644696] ? __alloc_fd+0x28d/0x570 [ 1592.648514] do_sys_open+0x3b3/0x520 [ 1592.652242] ? filp_open+0x70/0x70 [ 1592.655801] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 16:55:29 executing program 0: socket(0x2b, 0xa00, 0x1) 16:55:29 executing program 0: socket(0x2b, 0x1000000, 0x1) 16:55:29 executing program 0: socket(0x2b, 0xa000000, 0x1) [ 1592.661179] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1592.666209] ? do_syscall_64+0x21/0x620 [ 1592.670199] do_syscall_64+0xf9/0x620 [ 1592.674013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1592.679209] RIP: 0033:0x466459 [ 1592.682420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1592.701331] RSP: 002b:00007fd9ecca5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1592.709063] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1592.716347] RDX: 000000000000c000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1592.723628] RBP: 00007fd9ecca51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1592.730911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1592.738190] R13: 00007ffec2ab367f R14: 00007fd9ecca5300 R15: 0000000000022000 16:55:29 executing program 3 (fault-call:0 fault-nth:4): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/147, 0x93) 16:55:29 executing program 0: socket(0x2b, 0xfeffffff, 0x1) 16:55:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:29 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r0, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5ee, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffc1e9a297, 0x202040) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) 16:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x44, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}]}, 0x44}}, 0xc8c0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780)='devlink\x00', r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000880)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x50, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xfffffff9}, {0x6, 0x11, 0x7f}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r7 = syz_open_dev$vcsn(&(0x7f0000000600)='/dev/vcs#\x00', 0x3, 0x301100) sendmsg$TIPC_CMD_GET_NETID(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc040}, 0x8050) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340)='batadv\x00', r2) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@private0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c200000", @ANYRES16=r9, @ANYRES16, @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000840}, 0x4004) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x220008}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x124, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x9, 0x14}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x3c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x7dd5db2bbb5b8343}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x124}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="5455b0ade8", @ANYRES16=r1, @ANYBLOB="010400e2b819d082461e4eb90dfaa88c890000000000000000"], 0x14}}, 0x0) [ 1592.909456] FAULT_INJECTION: forcing a failure. [ 1592.909456] name failslab, interval 1, probability 0, space 0, times 0 [ 1592.944443] CPU: 1 PID: 22136 Comm: syz-executor.3 Not tainted 4.19.183-syzkaller #0 [ 1592.952366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1592.961734] Call Trace: [ 1592.964355] dump_stack+0x1fc/0x2ef [ 1592.968005] should_fail.cold+0xa/0xf [ 1592.971830] ? setup_fault_attr+0x200/0x200 [ 1592.976173] ? lock_acquire+0x170/0x3c0 [ 1592.980179] __should_failslab+0x115/0x180 [ 1592.984430] should_failslab+0x5/0x10 [ 1592.988242] __kmalloc+0x2ab/0x3c0 [ 1592.991801] ? sk_prot_alloc+0x1e2/0x2d0 [ 1592.995880] sk_prot_alloc+0x1e2/0x2d0 [ 1592.999785] sk_alloc+0x36/0xec0 [ 1593.003168] tun_chr_open+0x7b/0x560 [ 1593.006895] ? tun_flow_cleanup+0x350/0x350 [ 1593.011228] misc_open+0x372/0x4a0 [ 1593.014786] ? misc_devnode+0x120/0x120 [ 1593.018771] chrdev_open+0x266/0x770 [ 1593.022497] ? lockref_get+0x11/0x50 [ 1593.026224] ? __register_chrdev+0x400/0x400 [ 1593.030652] ? check_preemption_disabled+0x41/0x280 [ 1593.035688] do_dentry_open+0x4aa/0x1160 [ 1593.039758] ? __register_chrdev+0x400/0x400 [ 1593.044181] ? inode_permission.part.0+0x10c/0x450 [ 1593.049122] ? chown_common+0x550/0x550 [ 1593.053138] ? inode_permission+0x3d/0x140 [ 1593.057388] path_openat+0x793/0x2df0 [ 1593.061217] ? path_lookupat+0x8d0/0x8d0 [ 1593.065319] ? mark_held_locks+0xf0/0xf0 [ 1593.069398] do_filp_open+0x18c/0x3f0 [ 1593.073207] ? may_open_dev+0xf0/0xf0 [ 1593.077032] ? lock_downgrade+0x720/0x720 [ 1593.081192] ? lock_acquire+0x170/0x3c0 [ 1593.085180] ? __alloc_fd+0x34/0x570 [ 1593.088912] ? do_raw_spin_unlock+0x171/0x230 [ 1593.093419] ? _raw_spin_unlock+0x29/0x40 [ 1593.097577] ? __alloc_fd+0x28d/0x570 [ 1593.101399] do_sys_open+0x3b3/0x520 [ 1593.105127] ? filp_open+0x70/0x70 [ 1593.108687] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1593.114068] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1593.119101] ? do_syscall_64+0x21/0x620 [ 1593.123095] do_syscall_64+0xf9/0x620 [ 1593.126911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1593.132115] RIP: 0033:0x466459 [ 1593.135344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 16:55:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}) 16:55:29 executing program 0: socket(0x2b, 0xfffffffe, 0x1) 16:55:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff}) 16:55:29 executing program 0: socket(0x2b, 0x100000000000000, 0x1) 16:55:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x154, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x400, 0x2b}}}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xfffffffffffffef8, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x154}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00', r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000580)='SEG6\x00', r0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1b1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x40041) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r8 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000680)={0xb2ba, 0x80000000, 0xfffff86b, 0x80000000, 0x8}, 0x14) read$snapshot(r8, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r10 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa83, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r10, 0x80083314, &(0x7f0000000040)) 16:55:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffff}) [ 1593.154265] RSP: 002b:00007fd9ecca5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1593.161997] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1593.169282] RDX: 000000000000c000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1593.176563] RBP: 00007fd9ecca51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.183846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.191125] R13: 00007ffec2ab367f R14: 00007fd9ecca5300 R15: 0000000000022000 16:55:29 executing program 3 (fault-call:0 fault-nth:5): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:29 executing program 0: socket(0x2b, 0xa00000000000000, 0x1) 16:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) write$dsp(r2, &(0x7f0000000280)="b0507ac0593c7d5f2f81cbcb64864fc0b3704906635d9ba907d8f9989773c265ca05db1365bb8cfa5052add76cce0e908c1d55c1e6c5a6322e48c86fba777927d5a1fcd367130c82af20656067eff0878935aa4ef1df23664eec9673837fcc9e08e94fc2e57a29cefea85dd445fb3b893430db258a9c8073511414d7e7be7e6d7fd63fcee82d8ac10d5fe83c3412f59dbf95d70772b0c67f2d80ea02967ca575625eaa85f08446f693c332cf14f7e159df942ac7ab8a3f90745157f117c1c06b4a60a734dabddd2826d24ac39652dc451bb1facd472b0d93c9a917", 0xdb) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4bc81aa", @ANYRES16=r3, @ANYBLOB="01002cbd74005200837d0a76d662dd1effdbdf251800000082037abfc06cf60782570df5f0578b7278859826fd7daa68d078c936cd712771617a9c93f09514321e06fcdf7b54f72d12f1da9875c727500b599d1370ab06886ed94262674fd7c53356105e75591c9daae3dab02ecfe41a144c951d79aeb4d124f4ae1b0d6cc1e8266d771e76ec82c671"], 0x14}, 0x1, 0x0, 0x0, 0x845}, 0x8000) 16:55:29 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x701f81) read$snapshot(r0, &(0x7f0000000040)=""/127, 0x59) [ 1593.213398] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1593.241030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 16:55:29 executing program 4: syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000000)) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7f) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r4, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) 16:55:29 executing program 0: socket(0x2b, 0xfeffffff00000000, 0x1) 16:55:29 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020029bd58dc352c837b6a05b35870ff08003b00ff7f002017a94db7ca6de7ee6542e1b3fbd04cade832046809bca94bbaf509b9be5c1d51f8c5a8079cfab0c9feddd0b75dd11c0650a92278", @ANYRES32=r2, @ANYBLOB="05002a000100000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) 16:55:29 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x700, 0x0, 0x0, 0xffffffffffffffff}) [ 1593.368294] FAULT_INJECTION: forcing a failure. [ 1593.368294] name failslab, interval 1, probability 0, space 0, times 0 16:55:29 executing program 1: semget$private(0x0, 0x0, 0x114) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x701000, 0x0) read$snapshot(r0, &(0x7f0000000080)=""/134, 0x86) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x2000, 0x0, 0x0, 0xffffffffffffffff}) [ 1593.459251] CPU: 0 PID: 22171 Comm: syz-executor.3 Not tainted 4.19.183-syzkaller #0 [ 1593.467184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1593.476553] Call Trace: [ 1593.479169] dump_stack+0x1fc/0x2ef [ 1593.482819] should_fail.cold+0xa/0xf [ 1593.486641] ? setup_fault_attr+0x200/0x200 [ 1593.490979] ? lock_acquire+0x170/0x3c0 [ 1593.494975] __should_failslab+0x115/0x180 [ 1593.499230] should_failslab+0x5/0x10 [ 1593.503043] kmem_cache_alloc_trace+0x284/0x380 [ 1593.507729] apparmor_sk_alloc_security+0x5c/0xe0 [ 1593.512585] security_sk_alloc+0x50/0xb0 [ 1593.516669] sk_prot_alloc+0x200/0x2d0 [ 1593.520577] sk_alloc+0x36/0xec0 [ 1593.523965] tun_chr_open+0x7b/0x560 [ 1593.527698] ? tun_flow_cleanup+0x350/0x350 [ 1593.532032] misc_open+0x372/0x4a0 [ 1593.535588] ? misc_devnode+0x120/0x120 [ 1593.539573] chrdev_open+0x266/0x770 [ 1593.543300] ? lockref_get+0x11/0x50 [ 1593.547021] ? __register_chrdev+0x400/0x400 [ 1593.551442] ? check_preemption_disabled+0x41/0x280 16:55:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000007bd04cbdfaba2b6e19585969964699563354b2f2bf1e1ec1956d98bbf218f4ff4c6bfe93b57aa2aec85794659e555b8ae9f5dbeb4903d889c2fca4ca50b319c544fb4e85f6de0a66c06414c0ca19e334c206df81f3fdccfda134a0f6e3f595f2fdfc45009d65798ba093a2d519e5c7c6fb9e102bc7e92539e16b669f9f988cdb3a43b8c29c8af08e9cfd09e7af59fa4609d1ce4e57739eef4acda806f30555c7d1f41622d24c7a40552edd2f5665bc15918339fef6eb5d43cf7b0ccafb542f88520a480a443aff7af557b4ccf740fb738c883247ce1aeb4901933338866e9719982153160738b0", @ANYRES16=0x0, @ANYBLOB="040026bd7000fbdbdf255d0000000c009900e340300e460000001c00a6800a00060008021100000000000a00060008021100000000000800a500000000000800a500010000000800a50000000000"], 0x54}, 0x1, 0x0, 0x0, 0x4040}, 0x40030) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xffffffffffffffff}) [ 1593.556480] do_dentry_open+0x4aa/0x1160 [ 1593.560557] ? __register_chrdev+0x400/0x400 [ 1593.564984] ? inode_permission.part.0+0x10c/0x450 [ 1593.569923] ? chown_common+0x550/0x550 [ 1593.573911] ? inode_permission+0x3d/0x140 [ 1593.578165] path_openat+0x793/0x2df0 [ 1593.581991] ? path_lookupat+0x8d0/0x8d0 [ 1593.586071] ? mark_held_locks+0xf0/0xf0 [ 1593.590147] do_filp_open+0x18c/0x3f0 [ 1593.593959] ? may_open_dev+0xf0/0xf0 [ 1593.597783] ? lock_downgrade+0x720/0x720 [ 1593.601943] ? lock_acquire+0x170/0x3c0 [ 1593.605927] ? __alloc_fd+0x34/0x570 [ 1593.609659] ? do_raw_spin_unlock+0x171/0x230 [ 1593.614172] ? _raw_spin_unlock+0x29/0x40 [ 1593.618344] ? __alloc_fd+0x28d/0x570 [ 1593.622166] do_sys_open+0x3b3/0x520 [ 1593.625895] ? filp_open+0x70/0x70 [ 1593.629453] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1593.634831] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1593.639861] ? do_syscall_64+0x21/0x620 [ 1593.643852] do_syscall_64+0xf9/0x620 [ 1593.647667] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1593.652863] RIP: 0033:0x466459 [ 1593.656070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1593.674979] RSP: 002b:00007fd9ecca5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1593.682707] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 [ 1593.689987] RDX: 000000000000c000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1593.697267] RBP: 00007fd9ecca51d0 R08: 0000000000000000 R09: 0000000000000000 [ 1593.704543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.711813] R13: 00007ffec2ab367f R14: 00007fd9ecca5300 R15: 0000000000022000 16:55:30 executing program 3 (fault-call:0 fault-nth:6): openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x2000000, 0x0, 0x0, 0xffffffffffffffff}) 16:55:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) 16:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket(0x22, 0x6, 0x4) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000140)={0x60, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x880}, 0x8000) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000d80)={0x4a0, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff34da}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x3, @loopback, 0x7fffffff}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private0, 0x2}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3792}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31c}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1000200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x371b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x84}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xdf}]}, @TIPC_NLA_NODE={0x228, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "159b182c94714341cfac0e5f5a3264f8d17fd5711a25bb86d25e0ea6f830632b2b1963500701a6e133fe2cc24de20db7f19c155f071446fcbc80065c4d9225f326570d88b22592b61612a3724a1964ebf0daff9edbd87af146d40dd35b84e2680d33e53556bd99abbde65d448b899a524b1610b7d34287786eaf93ae1696e45553b43e9c50c3ee4f573fccd99c519a652e3fb70aeef3563941dee3d7926ee3691d4618931b"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "f6e288eb174fad64957ca37a0f1d16d8fca72ab430"}}, @TIPC_NLA_NODE_ID={0x20, 0x3, "46670978988fe468d0ea369956418e61c13c1ac5ad4df0b6e71cbdac"}, @TIPC_NLA_NODE_ID={0x6f, 0x3, "4ad457a5f5a087d2dbec67c706f9d0a5b9163b3d57df749f707358345a3b8e31338c245fcdd9537c4fef44189c0e00ef18390920f501956de05e13122dd0fd317c1b42595ded20af9961197fc5214b4e9c408287a6397bf8ff3f56e73a4b2a16817192c2930092b4b81478"}, @TIPC_NLA_NODE_ID={0xa6, 0x3, "6501205ec59b6435c73248abdfd1abe28b2725f29ea84a7c4e5cc44a99eb3f994f1ef854d3510cad55894692be3c334ad705ead0135cf4b9cded5e9743f25d056c726691893edaab40ab488de0ae3f71f5a10d587f9f69a48546098244927d7f019fa0c21098b239904591079e94e49de7361ab13204b5cd38a1861ccc78eb090d071f7a7e9cbcec53ef157d91ba1bc61b023a4b9e7284e56e008e79f8ceaaf59afa"}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x81}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7, @private2, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4d}]}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x1}, 0x44810) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400fee9", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r6, 0x511, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x5c, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8804}, 0x20004000) 16:55:30 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) 16:55:30 executing program 0: socket(0x2b, 0x0, 0x5) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x7000000, 0x0, 0x0, 0xffffffffffffffff}) 16:55:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = getpgid(0x0) getpgid(r1) r2 = syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/pid\x00') ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r4, 0x0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) ioctl$SNAPSHOT_FREE(r3, 0x3305) 16:55:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/123, 0xffffffffffffff71) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x6, 0xc0040) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000100)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x24200) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 16:55:30 executing program 5: r0 = semget(0x1, 0x2, 0x603) semctl$GETVAL(r0, 0x1, 0xc, &(0x7f0000000080)=""/111) semctl$GETPID(r0, 0x0, 0xb, &(0x7f0000000000)=""/24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010058b42a3c0000000003000000"], 0x14}}, 0x0) 16:55:30 executing program 0: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000080)={0x0, r0}, 0x10) socket(0x2b, 0x0, 0x1) 16:55:30 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc002, 0x0) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffffffffffff}) 16:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x20, 0x70bd2c, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4048884) [ 1594.034333] Restarting kernel threads ... done. 16:55:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:30 executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00', 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x104, r0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d, 0x25}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010100}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x104}, 0x1, 0x0, 0x0, 0x804}, 0x90) r1 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x1406, 0x100, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x14048050}, 0x20000000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xffffffffffffffff}) 16:55:30 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc003, 0x0) 16:55:30 executing program 0: r0 = semget(0x3, 0x3, 0x1c0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000000)=""/219) socket(0x2b, 0x2, 0x1) 16:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 16:55:30 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x3c, r1, 0x20, 0x70bd2c, 0x0, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000000}, 0x4048884) 16:55:30 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0xa7adfe444e493dce) ioctl$SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000000000)) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0xffffffffffffffff}) 16:55:30 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc004, 0x0) 16:55:30 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000d80)={0x1454, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xd0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x910c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x94, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8d, 0x3, "03976e6f3efec15d27c026c653b013104a2572c74fbb4a3b7b89cc928a2611c124579cf1c80b63d69e5489bb079af5e5088e8823e74cada56e4ee8e633f554a775f68675f54ccc2813a0312d1270a1072ac1347fae04e942f15bbf4e30ebf700798b6ab0f667f8f0222b486cb4f15c31628e367e6262ce3635c78e72b0c3bb759077f25ad568a50a28"}]}, @TIPC_NLA_NODE={0x1264, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb17}, @TIPC_NLA_NODE_ID={0x7e, 0x3, "b6d0416bcd55640ea2e7fb5df23d6cd01b52a39068ff8920668c10300838da49ff8b89869d85de98ef9d2b85ce7033aa1a35c6406d3e46d813c943f0275a660508997a4e09a19683a0c2444e15a8482b413db574d25dd576b0682565da83f36ad2ab75b6a151884c74afe3c0dd5324d6c3371f77f8c8060665d7"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7ae534181e50b6acaaae8b76f31452991c0928b37e5c"}}, @TIPC_NLA_NODE_ID={0x9a, 0x3, "4b75c3e68ecd36a7ad28009ccffe22266c959016873cb181b0ac27521a0873baedd6d44b256bfd308aec4e2d3bc9ee725d459523cede0c82bea4438bc2032ff10df603bd8c30316cc0330f66d9ab32b541fb001c551588e13f746a3d717beeeb62fc4d72007ffb2d5fc8ec73b89421a2a4ddfebbbe752f1965f11de52fa71a766ff388135401e43dfe9aea5bac01c15f95f3190ec11d"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_ID={0xdd, 0x3, "9c8648c7e607e7f2e38d887dff8428b05675a3fe533e710fe531b11533986978b5d6294730cf7beb1c969a74078b4d20b1ccbf8b2c57fb0992394ba9eabaa2381328451b1cc48894599c8bfb3b17d9b25f7787ad82887ba111e7d1872b03b7c492cbb3ef53e7b4d89484f5982785f77baf430dd3e778e15b23cefe21f9beecbab87ac568d8f9cd5414841e69edbfc0a618e6954298157e0bcae6f2ff9145b0187d1965a15e4ec0df2809e971f7a3cb0bd5ae68870a6e9f8e5e8c69270fa7802d0016a2b9473207c40d9aa55689256e6b97125514482d9b5b0b"}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x1454}, 0x1, 0x0, 0x0, 0x4004}, 0x80) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'}) 16:55:30 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket(0x21, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x259}]}, 0x5c}}, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 1594.362877] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 16:55:30 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x20000000, 0x0, 0x0, 0xffffffffffffffff}) 16:55:30 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0xffffffffffffffff}) [ 1594.411402] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc007, 0x0) 16:55:31 executing program 0: r0 = socket(0x2b, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delchain={0x2c, 0x65, 0x400, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1f, 0xfff1}, {0x0, 0x3}, {0xfffb, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}}, 0x1) 16:55:31 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r1, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xac, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "c7002e281dfa61ff97572ea96411afc9617491e0785c004d844dfafe38bec67f9d"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "3744f13ddd9127faf0f1a48617771ad539b071177996b27fe79c960521"}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040) 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc00a, 0x0) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}) 16:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket(0x21, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x259}]}, 0x5c}}, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x44, r2, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@val, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x639b}, @NL80211_ATTR_NOACK_MAP={0xffffffffffffff93, 0x95, 0xc1}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x8040004) socket(0x2b, 0x0, 0x1) 16:55:31 executing program 1: socket$kcm(0x29, 0x0, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)={0x27c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x2f9}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x548}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4f02}, {0x8}, {0x5, 0x14, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x6}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0xffff}, {0x8, 0x13, 0x3}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xffd2}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x3f}, {0x5}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x20}, {0x8, 0x13, 0x9fad}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1}, {0x5}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6233}, {0x8, 0x13, 0x9}, {0x5, 0x14, 0x1}}]}, 0x27c}, 0x1, 0x0, 0x0, 0x1}, 0x4000880) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x2) 16:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket(0x21, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x259}]}, 0x5c}}, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:31 executing program 0: socket(0x25, 0x0, 0x800003) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000f22243c2caf6170555db23362d474f2bafd9628dcc376eb158674b9505b0918556311d5e87fd8eb8fc939b78a38405f8b95ff02e307e55461404e84c2020adb1917fbfea92b3fe22050357ccc8ca1590346b11163bd9ca479711f912b4f6b4dfc25a5ee615a1bdb1c9d4ac3bff98c866ce50cddf0c18f9040a7d173073ccf759f1ad7c45ddbdc84eadb1e9ae82ac5c6e49cc43e6cb0000008000000000c4789863f481f301cc4f1055afe419af", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fcdbdf250b000000050035000700000008003100faffffff08003a000000008008000300", @ANYRES32=0x0, @ANYBLOB="05002e000100000008003a000900000005002f000000000008003a00ff000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff}) 16:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x100, 0x0, 0x25dfdbfc}, 0x14}}, 0x0) 16:55:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00', r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00', r0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00', r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x0, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0xfff, @bearer=@udp='udp:syz1\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00', r0) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00', 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f0000000540)='/dev/vcsa#\x00', 0x1f, 0x400000) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="0e9919", @ANYRES16=0x0, @ANYBLOB="000325bd7000fedbdf251a00000005009200090000000400cc00080001004b000000"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x34) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}) 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x3) 16:55:31 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket(0x21, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x259}]}, 0x5c}}, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:31 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00', r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xce}]}, 0x34}, 0x1, 0x0, 0x0, 0x4048008}, 0x2010) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000329bd3000fbdbdf250800000008002c000000000005004601000000575b418c4c69c428ca3300080032004000000005b4d5193e4729ec"], 0x34}, 0x1, 0x0, 0x0, 0x4040095}, 0x44801) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x128, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4b}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x7}, @NL80211_ATTR_REG_RULES={0x64, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1c}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x16}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd9fc}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xbd3}]}]}, @NL80211_ATTR_REG_RULES={0x7c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffa}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4bc}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x63}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa573}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1020000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x84, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0x40) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00'}) 16:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x14}}, 0x0) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x700, 0x0, 0xffffffffffffffff}) 16:55:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000100)={@local, 0x0}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fbdbdf250700000008003c000002000008003c0003000000050035006a00000008002b0040020000050029000100000008000300", @ANYRES32=r1, @ANYBLOB="f3078fb900fffffd"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x20}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x21, 0x2, r3}, 0x14) read$snapshot(r2, &(0x7f0000000300)=""/138, 0x8a) 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x4) 16:55:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r0 = socket(0x21, 0x5, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10200100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x259}]}, 0x5c}}, 0x10) 16:55:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00', r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff}) 16:55:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00', 0xffffffffffffffff) r2 = socket(0x1e, 0x5, 0x7) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0)='mptcp_pm\x00', r0) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r4) setsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f00000004c0), 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, r3, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe0}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x40001}, 0x4c091) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="55a525bd7000ffdbdf2509000000080032000900000008000b000200000008002b0006000000050035000800000008003c0008000000050035007f00000061792583a24ef812b71a64fe4a399dfede59dd7cbefd889b18d16142e361c926f42309de31752442a67d39518431ea05d3c52e79092fa334722242733d695128dba0921835a65309f572ecdc65cde6424734cc593b8778eb4697be8485590523bbca02b7ce7b9ae8cd467b13d3126463a42ab8f23c325fb8879742519525ea399a3280df4589e135a669862dab"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x40000000, 0x53}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 16:55:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1d, 0x7ff, 0x1, 0x1, 0x8, r0, 0xcc4a37e, [], 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x40) 16:55:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) socket(0x21, 0x5, 0x2) 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x7) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x1000000, 0x0, 0xffffffffffffffff}) 16:55:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) 16:55:31 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:31 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xa) 16:55:31 executing program 0: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3ff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008001}, 0x20000040) socket(0x2b, 0x0, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0x14) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) bind$802154_dgram(r1, &(0x7f0000000180)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 16:55:31 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket(0x21, 0x5, 0x2) 16:55:31 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8080) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x10) 16:55:32 executing program 4: socket(0x21, 0x5, 0x2) 16:55:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r8) sendmsg$IEEE802154_SET_MACPARAMS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff000000050028000000000008000200", @ANYRES32=r9], 0x5c}}, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x6c}}, 0x44004) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x208, r4, 0x80, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x34, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xab}, @TIPC_NLA_BEARER_NAME={0x9, 0x1, @l2={'eth', 0x3a, '\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}]}, @TIPC_NLA_SOCK={0xc8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f2}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffc1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vcan0\x00'}}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6bbc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0xc000}, 0xc001) 16:55:32 executing program 0: sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6a2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400e004}, 0x40000) socket(0x2b, 0x0, 0x1) 16:55:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x7000000, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfff, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) ioctl$SNAPSHOT_S2RAM(r0, 0x330b) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x300) 16:55:32 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r0, 0x1}, 0x14}}, 0x0) 16:55:32 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x98, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x5}, 0x40) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/72) socket(0x1, 0xa, 0x9) 16:55:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 4: socket(0x0, 0x5, 0x2) 16:55:32 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x19c}}, 0x40000) r11 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r11) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x700) 16:55:32 executing program 0: socket(0x22, 0x1, 0x4005) 16:55:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000306ba00000000000000"], 0x14}}, 0x0) 16:55:32 executing program 4: socket(0x0, 0x5, 0x2) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xa00) 16:55:32 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x100, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000040)={0x3, 0xfff, "a22f8d", 0x38, 0x40}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ff010000", @ANYRES16=0x0, @ANYBLOB="7ae926bd7000ffdbdf25010000000000000009410000004c00180000000065746800"/98], 0x68}, 0x1, 0x0, 0x0, 0xc000}, 0x48854) 16:55:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0xca8100) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x961}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1a, 0xfffffffd, 0x0, 0x401, 0x0, 0x1, 0x198, [], 0x0, r2, 0x5, 0x3, 0x5}, 0x40) 16:55:32 executing program 1: sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xff, 0x29}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004814}, 0x8010) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x84000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x3, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x88, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x6d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x20040800}, 0x40090) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80, 0x0) read$dsp(r6, &(0x7f0000000080)=""/205, 0xcd) 16:55:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 4: socket(0x0, 0x5, 0x2) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x100000) 16:55:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x1000000) [ 1596.109157] nla_parse: 8 callbacks suppressed [ 1596.109166] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:32 executing program 0: socket(0x2b, 0x0, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r3, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf442431e41e1ec3ce0838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="040029bd7000ffdbdf255c00000008006b000a00000008006b006e000000bb8d551738acb383c4ab0159ae17ae08006b001400000008006b001400000008006b001c02000008006b00db00000008006b0020020000"], 0x4c}, 0x1, 0x0, 0x0, 0x8085}, 0x8000) 16:55:32 executing program 4: socket(0x21, 0x0, 0x2) 16:55:32 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x2000000) [ 1596.220798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:32 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0xffffffffffffffff}) 16:55:32 executing program 5: syz_genetlink_get_family_id$nl802154(&(0x7f0000000180)='nl802154\x00', 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000b0000000c000580070001006962000004000780"], 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xfffffffffffffd5e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9424feac", @ANYRES16=r3, @ANYRES32=r1], 0x194}, 0x1, 0x0, 0x0, 0x2}, 0x20000847) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="21426b8cb18ac05d5f60528fa25b57e974ebc4e3980200000000000000dc1600172f6c48529a880e3e0d52d6c13c54c7737fb777c74ea08c09a88e0a233e1a2b53a961e5c5edeab4109300f63d015a65073563123024521b6ac97c345e8f49ae4db2ecdea53ce8736f2c2160d98b2fe2dcbca2e50f471ae54463f76cc8bab2d1e04fa4fe1233212b3a294a2be78ca5055aaadef5602d9d550fde279ace43453ec74aaa894ce6ec882dbb7151aa35839e3c933941f61947245b28110000", @ANYRESDEC, @ANYRESOCT=r1], 0x14}}, 0x400c480) 16:55:32 executing program 4: socket(0x21, 0x0, 0x0) 16:55:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00', r0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa00100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x800, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40020}, 0x24044005) read$dsp(r0, &(0x7f00000003c0)=""/4096, 0x1000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xcd48aa01442a7f14}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xe5cc}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x200}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040000) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x3000000) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0xffffffffffffffff}) 16:55:33 executing program 0: r0 = socket(0x2b, 0x0, 0x1) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb0, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x84010}, 0x4000810) 16:55:33 executing program 5: sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x68, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet(0x2, 0x1, 0x532) r4 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000000)={r3, r4}) 16:55:33 executing program 4: socket(0x21, 0x0, 0x0) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x4000000) 16:55:33 executing program 4: socket(0x21, 0x0, 0x0) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0xffffffffffffffff}) 16:55:33 executing program 0: ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) socket(0x2b, 0x0, 0x1) 16:55:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)={0x88, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xb31}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000280)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r6, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r5, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYRES16=0x0, @ANYBLOB="04002abd7000ffdbdf250600000008000300010000000900020005000000"], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4004040) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r7, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r7, @ANYRES16=0x0, @ANYBLOB="000028bd701b52690000ee37b6e28a80854c7e0ef63f54e54c11e9450c7fec5b39242a3ceebe39d24de54ea8fc0d2fc4c29ae90340cd7f94d6a4d4e70f9cb835a04ec74fa2185f7e675c0b90c7c26ee4c7fbbee9ad5d0041504581a26318fc7fe3da961eb87bd9f5120ef687a02e8cf0a486a78ddb27b4cb0b89a8ac97eee73393c7a70cb23cacc28a95445f4c9fc8e4f4e782cd822aff4d6620041003d3df377cd0d3509d8bf7c869aab597a2c3752dec1ccf1972e947f3ed862967a76f052bc600c8a19591fffcd7217c6b8dee1c7bfb5e5bdec798227835f2477c540af04dd2dc2b3bef2bc6fa20b2b463b8b04d6162b1a051ff4e26a87e289b8b6fe906ee5c02ce564e7650a1b7d74c72dd43cfd5157683fdb3bbb2fd472aaeb664e5c2894268665c621129eaf6dbf986867cdad3081c54183f614f29c2c9eddc2b15a987fb1a8380045bef630c3bb4b5af90b933b3905a4323707a09f64c63532e7242923e91d0c6b2d461125ffff029b550000c43f20eb9503b0c008d2483f7b891e7d753ca78f9d3d174253a5936aa256787662df62039e79b70f91d4464d65c98b95d535e00000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x400c001) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000000000008d9601aa15b094e1cde16080478d4705f8fa5d93eebc67ab0f04168ad46eab3c273791634c0583e6f8"], 0x14}}, 0x0) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x7000000) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0xffffffffffffffff}) 16:55:33 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x3000000) 16:55:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3f}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44003}, 0x815) socket(0x11, 0x5, 0x401) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000400)={0x0, r5}, 0x10) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="60010004", @ANYRES16=0x0, @ANYBLOB="00012dbd7000fbdbdf25550000000c009900060000000e000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000890}, 0x4004000) read$snapshot(r0, &(0x7f0000000180)=""/235, 0xeb) r6 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x400202) ioctl$LOOP_SET_FD(r0, 0x4c00, r6) r7 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r7) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r7, 0x40045731, &(0x7f0000000140)=0x3) 16:55:33 executing program 0: r0 = socket(0x2b, 0x0, 0x1) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xe3b9091626d754f9}, 0xc084) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0xffffffffffffffff}) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xa000000) 16:55:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x19c}}, 0x40000) r11 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r11) 16:55:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000000)) 16:55:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00', r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:33 executing program 0: socket(0x18, 0x0, 0x8000001) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0xffffffffffffffff}) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xf6ffffff) 16:55:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x19c}}, 0x40000) r11 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r11) 16:55:33 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x381280) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00', r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xf0, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x9}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xa7}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x6}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0xbdd}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4000044) 16:55:33 executing program 0: r0 = socket(0x2b, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 16:55:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00', r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xfffffff6) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0xffffffffffffffff}) 16:55:33 executing program 1: ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000000)=0x5) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x6) r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000100)) read$snapshot(r0, &(0x7f0000000080)=""/122, 0x7a) 16:55:33 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff}) 16:55:33 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x1000000000000) 16:55:33 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x19c}}, 0x40000) r11 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r11) 16:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r4, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x29}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xac}]}, 0x58}, 0x1, 0x0, 0x0, 0x84895}, 0x4004000) 16:55:34 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00', r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000e7331b583e09aca432c54f40fca1c573b900b788410c3700a04ae7873575be", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r4, @ANYBLOB="140002006e657464657673696d300000000000000800030001000000080003000100000008000100", @ANYRES32=r5, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000840)={@private2}, &(0x7f0000000880)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000008c0)={@ipv4={[], [], @broadcast}, 0x0}, &(0x7f0000000900)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f00000003c0)={0x1d8, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xed4de93b5b06f0d7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4024821}, 0x4000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1cc, r1, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x88, 0x5, "3d2ce02da2d4e33eff11a1018a0737de2ff8daf46f1fa597777322fc91cc4be58dfeb41d88e61661cd5e7baaeaffaf29d09cd18179fc1d9415cef7c1ecb4a471f61b26922383f11d1725692cba723b261bb416e3d7af1eaea64b92a3a02335fbcafde464d8e00e1e7e516995bcacc4d04e8235ef315badf2dce8bab0d8f0bf971a3c1d08"}, @ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@{.!-\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x11}, 0x40050) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="9907000000000000002b9ea00eccb028f690aa077279e29e57f4ab", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf250d0000000c0009800800020007000000440004800900010073797a300000000014000780080002000800000008000200010400000900010073797a30000000001300010062726f6164636173742d6c696e6b00003c00018038000400200001000a004e2300000006fc020000000000000000000000000000010000001400020002004e23ffffffff00000000000000004400078008000200030000000c00040007000000000000000c00040001800000000000000c00040003000000000000000c0004000180000000000000080001000100000040010180380004001400010002004e24e00000020000000000000000200002000a004e230000b41dff0200000000000000000000000000010900000034000280080002000200000008000100020000000800040071020000080001001d00000008000300df000000080002005887000008000300060000001400028008000400400000000800030003000000380004001400010002004e24ac1414aa0000000000000000200002000a004e2000000006fe80000000000000000000000000000f50070000380004001400010002004e21e00000020000000000000000200002000a004e210000000300000000000000000000ffff7f0000010900000044000400200001000a004e23fffffffdff02000000000000000000000000000101010000200002000a004e200000000900000000000000000000ffffac141436030000002c00028004000400080002000100000008000200070000001400038008000100530c00000800020092d6ffff780004801300010062726f6164636173742d6c696e6b00004c0007800800040001000000080002005b08000008000200ffffff7f08000300800000000800040005000000080003000200000008000200010100000800020007000000080001001d0000001400078008000300590d00000800030008000000680004802400078008000100050000000800030008000000080001000100000008000200010000000c00078008000100190000001300010062726f6164636173742d6c696e6b00000900010073797a30000000001300010062726f6164636173742d6c696e6b0000"], 0x330}}, 0x40000) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff}) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x10000000000000) 16:55:34 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8599a48d50875682}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="575860283027ac85bd232f25f15fffe52c8d338a5ddfae343eb6b30659c25e38d270dc6c6a4187a1fdc93ddbf3177f3a7adb8c9c884d75db58ccd2f902ef692f46cae3b5cbd275dfea0353d1ee739244edff3c5b43b4c221f633e08e5e68df575699a1333c23777ccfcdba0ec7286635d4494e448a"], 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x801) read$snapshot(0xffffffffffffffff, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) [ 1597.565736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x100000000000000) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff}) 16:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x19c}}, 0x40000) socket$vsock_dgram(0x28, 0x2, 0x0) [ 1597.640117] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r0], 0x28}}, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r2, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x64}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x19}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0000}, 0x20040000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x200000000000000) 16:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008010}, 0x2004c400) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x700, 0xffffffffffffffff}) 16:55:34 executing program 0: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="df01001c", @ANYRES16=0x0, @ANYBLOB="000429bd7000fddbdf250d00142a2800018008000300000000000000000000080003000200000000000000000000000000000000000093003fbdd3c19d932fd2dafc8c9501d466b956f4814f26ee1fdaf8e51577aa8be1c3d46ff8d4e278050fdf8a1afe2d84ff233734d3cd68ff840173f49ff9524d5cee9934b84963f5e6e2f10b23a05475dae4eaac0c22409ff91217253deca500ee45a189623ee062507d399a9edfc17ba74a3670cf"], 0x3c}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r0, 0x4, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x21}}}}, ["", ""]}, 0xfff7}, 0x1, 0x0, 0x0, 0x20001844}, 0x8000) socket(0x2b, 0x0, 0x1) 16:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x19c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x19c}}, 0x40000) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x300000000000000) 16:55:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f00000000c0)) read$snapshot(r0, &(0x7f0000000000)=""/139, 0x8b) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x2000, 0xffffffffffffffff}) 16:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14c86b40", @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000"], 0x14}}, 0x0) 16:55:34 executing program 0: socket(0x29, 0xa, 0x0) 16:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x400000000000000) 16:55:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40000, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b3e9e752e03631842af759261c3d0f61373b6810a2956cc307b7ec94d807a9f97f2575d2c67c04be79ce18b6d1c7c967f2636a0970d780dfccece6511c9c259ea44149c7c2dc0bdafc1c421e70e42b986777ce7e71515ab069f98e0b00001d8cbbbac37ebffe4b6fdaa39fe1bde0e5133265c6bf5e169c147e529f18c40c0689ffda887f71214565ca2aacb510c054f20000000089d8", @ANYRES16=0x0, @ANYBLOB="000104000000fddbdf250100000005002e0001000000"], 0x1c}}, 0x90) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x1000000, 0xffffffffffffffff}) 16:55:34 executing program 0: r0 = socket(0x2b, 0x80000, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x50, 0x24, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xa}, {0xffff, 0x10}, {0xb, 0xa}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1f, 0x1, 0x1000, 0x1000, 0x2, 0x18000000, 0x7, 0x4}}, {0xc, 0x2, [0x40, 0x200, 0xcf3, 0x9]}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000080}, 0x41) 16:55:34 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00', r0) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x42a242) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r4 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x3, 0x101802) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000440)='SEG6\x00', r2) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x7c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff317c}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfbd}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x40, 0x7]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x3e, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x800, 0x4, 0x1, 0x7, 0x2]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x2b}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4840}, 0x4) syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x1bb, 0x2000) r6 = syz_open_dev$vcsn(&(0x7f00000005c0)='/dev/vcs#\x00', 0x9, 0x400000) getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xfffffd95) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x220, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080029bd7000fddbdf250300000008000600", @ANYRES32=0x0, @ANYBLOB="05002f0008000000000000001f00000008000600", @ANYRES32=r7, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x700000000000000) 16:55:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000000)=""/138, 0x8a) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x2000000, 0xffffffffffffffff}) 16:55:34 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x131000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000080)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xa00000000000000) 16:55:34 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 16:55:34 executing program 5: getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x8, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:34 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x7000000, 0xffffffffffffffff}) 16:55:34 executing program 0: socket(0xf, 0x2, 0x1) 16:55:34 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100, 0x8000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x4000008) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:34 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0xf6ffffff00000000) 16:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00'}) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffffffffffff}) 16:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0x4e, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="28000014", @ANYRES16=r1, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e8d4ce4fc6986f509a0006a2295a85c28ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}, 0x1, 0x0, 0x0, 0x20000030}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="30e10000", @ANYRES16=r1, @ANYBLOB="00042cbd7000fedbdf25620000000c009900e1ffffff0a0000000600b300010000000600b30000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="70020000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf2518000000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b00b700000006001600010000000500120001000000060011000010000008000b0000080000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b0004000000060016003f0000000500120001000000060011000800000008000b0000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b00030000000600160000000000050012000100000006001100b18b000008000b00f6000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0xfffffffffffffe84, r1, 0x1, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xa0, r6, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5, 0x30}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xa0}, 0x1, 0x0, 0x0, 0x45}, 0x84) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="688e00da", @ANYRES16=0x0, @ANYBLOB="04002abd7000fbdbdf250700000008000600050000004c00028006000f00010100000800090006000000080005000100010006000b000200000014000100fe88000000000000000000000000010114000100e000000100"/98], 0x68}, 0x1, 0x0, 0x0, 0x20046041}, 0x5) 16:55:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000080)=0x7ff) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r0, 0x12}, 0x10) socket(0x2b, 0x0, 0x1) [ 1598.529210] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1598.561243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 16:55:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000080)=0x4) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x9) 16:55:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x4, 0x204800) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:35 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000021}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40010) 16:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xffffffffffffffff}) 16:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x401}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, r3, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x560}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="023cd4556d15"}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x40880) 16:55:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2040, 0x0) ioctl$SNAPSHOT_FREE(r0, 0x3305) 16:55:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/132, 0x84) 16:55:35 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00', r0) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_RULES={0x3c, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1ff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80000}, 0x40) 16:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0xffffffffffffffff}) [ 1598.891329] Restarting kernel threads ... done. 16:55:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0x86d88ac2, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x401, 0x608000) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r1, 0x40045730, &(0x7f0000000080)=0x1) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, &(0x7f0000000040)) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r3) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) read$snapshot(r2, &(0x7f0000000300)=""/138, 0x8a) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xe2c5, 0x286143) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=@deltclass={0x40, 0x29, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {0x7, 0xf}, {0x0, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x48}}, @tclass_kind_options=@c_multiq={0xb, 0x1, 'multiq\x00'}, @TCA_RATE={0x6, 0x5, {0x65, 0x84}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000001}, 0x88d2) 16:55:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000030000004dc3d051b01819ee436f4063e77f83216e8051b29b3ec74e2aa7900cbf75a91ab81a5e6f1de5733f59e0ac6aeedaff0b8c7d187f4784bd0c9a51e80a39def1dea9710635b715130b7f333edd16ecd4a4ab0d7074f015e7e60ac6fbaf9f7f"], 0x14}}, 0x0) 16:55:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x0) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0xffffffffffffffff}) 16:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0xffffffffffffffff}) 16:55:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x2, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:35 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x200) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180)='ethtool\x00', r0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x1ec, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0xc}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xac, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0xcc084) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x181}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24010810}, 0x20044881) socket(0x2b, 0x0, 0x1) 16:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) 16:55:35 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x80800) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x9f9, 0x2000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x3c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000090}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x20, 0x70bd2b, 0x79, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0xffffffffffffffff}) 16:55:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x48, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fffffff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000a0}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r2, @ANYBLOB="140002006e657464657673696d300000000000000800030001000000080003000103000008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r2, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newtfilter={0x5c, 0x2c, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {0x3}, {0x3, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x95}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x1, 0x5a}}, @TCA_RATE={0x6, 0x5, {0xc, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4048) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r3) sendmsg$IEEE802154_SET_MACPARAMS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES32=r2, @ANYRES16, @ANYRES32=r4], 0x5c}}, 0x800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x1c, r5, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x2ffb43147a3585ed, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={0x0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r6) sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fbdbdf25230000000500210000000000050028003000000005002700ff0000000500280000000000080002"], 0x5c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00', r8) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100df5c21182e83866e66c194ed"], 0x14}, 0x1, 0x0, 0x0, 0x20040091}, 0x0) 16:55:35 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40c400, 0x0) 16:55:35 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) 16:55:35 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfffffffffffff801, 0x10d480) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f0000000000)={0x1, 0x7ffe, 0xff}) 16:55:35 executing program 0: r0 = socket(0x9, 0x5, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00', r0) 16:55:35 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0xffffffffffffffff}) [ 1599.421374] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@deltaction={0x2d4, 0x31, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10001}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5972930c}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf21}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff71}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0f4}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2fd}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa012}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) 16:55:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = getpgid(0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x3f, 0x2, 0x50135ce6, 0x7f, 0x0, r1}) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r2 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x7, 0x8, 0x40, 0x7f, 0x0, 0x1000, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x6}, 0x500, 0xfff, 0x84b, 0x6, 0x10001, 0x9, 0x200}, r1, 0x7, r0, 0x9) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) 16:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) [ 1599.501196] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.5'. 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0xffffffffffffffff}) 16:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="e8010000", @ANYRES16=0x0, @ANYBLOB="000229bd7000fcdbc11cef5fcbdf250d0000005400018008000300000000001400020062617461647630000000000000000000080003004acc2f0808001e00", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020073797a6b616c6c65723100000000000018000180140002006e6574706369300000000000000000001400018008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="2000018014000200626f6e645f736c6176655f300000000008000100", @ANYRES32=r5, @ANYBLOB="7c00018014000200776c616e300000000000000000000000140002006970365f76746930000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002006772657461703000000000000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000300020000005400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002006d6163766c616e3000000000000000001400020076657468315f746f5f7465616d00000008000100", @ANYRES32=r10, @ANYBLOB="08000300000000002800018014000200726f7365300000000000000000000000080003000200000008000100", @ANYRES32=r11, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006e65747063693000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0c0001800800030000000000"], 0x1e8}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 16:55:36 executing program 0: r0 = socket(0xb, 0x0, 0x1) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14fd0000", @ANYRES16=0x0, @ANYBLOB="020527bd7000fedbdf250d000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', r0) 16:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00', r0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0xffffffffffffffff}) 16:55:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xffffffeb) 16:55:36 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x18c, r2, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x124, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1e}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x76}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4e0f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x656de291}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xf6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10fa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xaad}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}]}, @NL80211_ATTR_REG_RULES={0x44, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}]}, 0x18c}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r4, 0x0, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r4, 0x80083313, &(0x7f00000000c0)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3e, r0, 0x1}, 0x14}}, 0x0) socket$inet6(0xa, 0x4, 0x400) 16:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = socket(0x10, 0x3, 0x5) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0x87) 16:55:36 executing program 0: socket(0x2b, 0x0, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'}) 16:55:36 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x6, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0xffffffffffffffff}) 16:55:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x123840, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000000)) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x6) 16:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) socket(0x10, 0x3, 0x5) 16:55:36 executing program 5: setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x1400, 0x6, 0x7, 0x3, 0x4}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x28a000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x4ea7, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="15ac1165", @ANYRES16=r5, @ANYRES16], 0x3c}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="010027bd7000fcdbdf251200000008000600", @ANYRES32=0x0, @ANYBLOB="050035000100000008000600", @ANYRES32=r6, @ANYBLOB="0500370001000000"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x24000000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0)='batadv\x00', r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) 16:55:36 executing program 0: r0 = socket(0x2b, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x53}, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x2c}}}}}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r2, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xad7}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xf72}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5e4}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7a3}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x9de}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044804}, 0x20000000) 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0xffffffffffffffff}) 16:55:36 executing program 3: bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={0xffffffffffffffff, 0x1}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xffff7f41}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x48}}, 0x44050) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0xa2400, 0x0) 16:55:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x3c500) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) socket(0x10, 0x3, 0x5) 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x103100) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000)={0x0, 0xfffffeff, 0x9, 0x6, 0x9}, 0x14) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x14, 0xc5000000, 0x0, 0x6c, 0x2, 0xffffffffffffffff, 0x6, [], r1, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x40) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000100)=0x1000) [ 1600.073384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x2) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x9) 16:55:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x505100) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140d, 0x112, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40080) read$snapshot(r0, &(0x7f00000000c0)=""/149, 0x95) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) [ 1600.139641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 16:55:36 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000040)) 16:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100, 0x101000) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x20000}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000084}, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 16:55:36 executing program 0: socket(0x1a, 0x0, 0x1) 16:55:36 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) socket(0x10, 0x3, 0x5) 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x3, 0x210403) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1600.270427] Restarting kernel threads ... done. 16:55:36 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xc, 0x430ec0) read$snapshot(r0, &(0x7f0000000300)=""/123, 0x82) 16:55:36 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="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"], 0x14}}, 0x0) 16:55:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) socket(0x2b, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00', r1) 16:55:36 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000001, 0x1f}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x21d}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x87f0}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xffff}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0x10000810) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) 16:55:36 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f0000000000)) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x26c, r4, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1f}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x84, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xf07f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x86}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa26}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x10001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x100}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x295}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}]}]}, @NL80211_ATTR_REG_RULES={0x100, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3d}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x18d1d81e}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf754}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xc7bd}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffffffd0}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8f8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1f28587}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3607}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3ff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x400}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5f}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00', 0xffffffffffffffff) 16:55:37 executing program 4: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) socket(0x10, 0x3, 0x5) 16:55:37 executing program 1: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(0xffffffffffffffff, &(0x7f00000000c0)=""/151, 0x97) 16:55:37 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x98a41, 0x0) 16:55:37 executing program 0: ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000000)=0x2) socket(0x2b, 0x0, 0x1) 16:55:37 executing program 2: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r0 = semget(0x2, 0x0, 0x80) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) semtimedop(r0, &(0x7f0000000000)=[{0x1, 0xfff8, 0x1800}, {0x4, 0x5, 0x800}, {0x4, 0x7e6, 0x800}, {0x4, 0x40, 0x800}, {0x2, 0x9}, {0x3, 0x7, 0x1000}, {0x2, 0x5}, {0x4, 0x1ff, 0x1000}], 0x8, &(0x7f0000000100)={r1, r2+10000000}) 16:55:37 executing program 1: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400)='mptcp_pm\x00', 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x160, r0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x84}, 0x20040080) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) read$snapshot(r5, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:37 executing program 4: syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x121000) socket(0x10, 0x3, 0x5) 16:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000080)=0xe8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x184, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3a5db34a3c5d451c}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x184}}, 0x1) 16:55:37 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x171000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x42}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x5) 16:55:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r2, 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 16:55:37 executing program 0: r0 = socket(0x25, 0x2, 0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf25668d89740000000838ae534e7e1dd21665a45ac169c5e88ce857e03577588082fa2556662d1ca0f62d93e7fabee2af2ad715eda669f738"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)={0xd0, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0xfffffffffffffeaa}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7fff, 0x25}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x488d0) socket(0x2b, 0x0, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYRES16], 0x3c}}, 0x0) r9 = socket(0x28, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x20, 0x1401, 0x400, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80c0}, 0x20040000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="26bd7000fddbdf2504000000080031000002000005002e0001000000050033000000000008003200689a000008003900080000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x20004880) 16:55:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) 16:55:37 executing program 4: socket(0x10, 0x3, 0x5) 16:55:37 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0xc000, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x24002) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, &(0x7f0000000080)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) write$snapshot(r1, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x2, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r2) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000000c0)=r0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x8, 0x80000) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 16:55:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB='\x00'/14], 0x14}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d40)={0x0}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0)='nl802154\x00', 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f0000000280)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000dc0)={0x2c4, r4, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVKEY={0x50, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x28a5ba4a}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000000}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x98, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_ID={0x60, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfffffffa}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x99}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4008000}, 0x80) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040)='802.15.4 MAC\x00', r5) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000a40)={0x6c, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffc00}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x44a2}, @ETHTOOL_A_CHANNELS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x81}]}, 0x6c}}, 0x40) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001300)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x844) write$snapshot(r8, 0x0, 0x0) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="5bffffe56c03000fec2bd8547915a4c45890858883285be1ebe096b35257f1452e0cda3058786ddffd1c1340debdbf866ba04c450f242a1949533ccd9ff0638525b8e5cc447342707f07e0e1521fa7604454aa5faa492693d5100dfbd6ce8ec36487e56419092a01e2255b259e8e73140250", @ANYRES16=r7, @ANYRES64=r8, @ANYRES16], 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf251e00000008000300", @ANYRES32=r6, @ANYBLOB="0c0006000200009300000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) 16:55:37 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000000c0)) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x6, 0x0, 0x6, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x6, 0xe00) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640)='nl80211\x00', r1) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x1}}, 0x14) 16:55:37 executing program 0: r0 = socket(0x2b, 0x0, 0x1) syz_open_dev$sg(&(0x7f0000000140)='/dev/sg#\x00', 0x3782, 0x94802) r1 = semget$private(0x0, 0x4, 0x638) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000180)=""/9) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f00000001c0)=""/192) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80840}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x38}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8040) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) semtimedop(r1, &(0x7f0000000280)=[{0x3, 0x6, 0x1800}, {0x3, 0x9, 0x800}, {0x4, 0x8}, {0x1, 0x7ff, 0x800}], 0x4, &(0x7f0000000300)={r2, r3+60000000}) 16:55:37 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) read$snapshot(r0, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10b001, 0x0) 16:55:37 executing program 4: socket(0x0, 0x3, 0x5) [ 1601.042602] kasan: CONFIG_KASAN_INLINE enabled [ 1601.058563] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 1601.088958] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 1601.095251] CPU: 1 PID: 23014 Comm: syz-executor.5 Not tainted 4.19.183-syzkaller #0 [ 1601.103152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1601.112540] RIP: 0010:nl802154_del_llsec_devkey+0x163/0x380 [ 1601.118267] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ce 01 00 00 48 8b 93 20 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 4f 16:55:37 executing program 0: sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d00)={0x0}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040)='ethtool\x00', 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@initdev, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="64c5a81fbc49185dfb7037d6dd12f5a72743aa739f18af5c8b48356d64c4aa2a2719a31a1899763675d26c80d2fb01a535e5c47e9bc04ff004bd35cc9657c8306b8cfc83bccb14a289e95152f3219ff4d7a4aa8e49", @ANYRES16, @ANYRES32, @ANYRES32=r5, @ANYBLOB="140002006e657464657673696d300000000000000800030001000000080003000100000008000100", @ANYBLOB="cc55bd53f825df163e688ff15f205f0e874828039fc0421b263c75d6a9f7e950a3aa41672db972f2b2ae1c40b0edb3c77a", @ANYRESOCT=r4, @ANYRES32=r5, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r7, @ANYBLOB="140002006e657408000000000000000000080003080000000000000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="04000180"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="54020000", @ANYRES16=r0, @ANYBLOB="200029bd7000fbdbdf250600000020000180140002007465616d30000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="20000180080003000200000014000200776c616e310000000000000000000000640001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r3, @ANYBLOB='\x00'/13, @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f30000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="300001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r5, @ANYBLOB="080003000300000008000300010000002800018008000100", @ANYRES32=r6, @ANYBLOB="1400020073797a6b616c6c65723100000000000008000300020000005800018008000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200766972745f776966693000000000000008000100", @ANYRES32=0x0, @ANYBLOB="14000200636169663000000000000000000000006c00018008000100", @ANYRES32=r8, @ANYBLOB="140002006e723000000000000000000000000000140002006261746164765f736c6176655f300000140002006d61637674617030000000000000000014000200636169663000000000000000000000000800030003000000080003000200000024000180080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r9, @ANYBLOB="58000180080003000200000008000300010000001400020074756e6c300000000000000000000000140002006970366772653000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="140002007767310000000000000000000000000004000180"], 0x254}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) socket(0x2b, 0x0, 0x1) 16:55:37 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80, 0x200000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00ed5c", @ANYRES16=r2, @ANYRES16], 0x3c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048005}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x5d}, @NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000000}, 0x20004001) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYRES16], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00', 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB, @ANYRESDEC, @ANYRES64=r3, @ANYRESOCT], 0x28}}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, r7, 0x0, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4b}}}}, [@chandef_params, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1286}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb08}, @NL80211_ATTR_FRAME={0x8a, 0x33, @assoc_req={@wo_ht={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x80}, @broadcast, @device_b, @initial, {0x6, 0x747}}, 0x2201, 0x0, {0x0, 0x6, @default_ap_ssid}, @void, @void, [{0xdd, 0x60, "8441d9d35054cc7751e8ad825fc7106d2125fb85d2cc2e38083921c4143ec94400360ea76365fabfbd654b878efaa592b28a56f1a10277ad75f643047b4165ff8dfdfef03bcbe8ba6fc8880c435f05d60873c7e3e4eefd703e8b7452397397da"}]}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @multicast1}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25110000003800018008000100", @ANYRES32=r8, @ANYBLOB="140002006e657464657673696d300000f0fffcf0c79db05701000000080003000100000008000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r8, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x10100) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044810}, 0x885) r10 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x2, 0xb0d02) read$snapshot(r10, &(0x7f0000000300)=""/138, 0xfffffffffffffdef) [ 1601.137182] RSP: 0018:ffff8880753375e8 EFLAGS: 00010246 [ 1601.142563] RAX: dffffc0000000000 RBX: ffff8880b258b2c0 RCX: 0000000000000000 [ 1601.149857] RDX: 0000000000000000 RSI: ffffffff87c5964d RDI: ffff8880b258b3e0 [ 1601.149870] RBP: 1ffff1100ea66ebf R08: 0000000000000001 R09: ffff888075337920 [ 1601.164407] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888238014bc0 [ 1601.171696] R13: ffff8880ab5ad090 R14: ffff8880b258b2c0 R15: ffffffff89cf67c0 [ 1601.178985] FS: 00007f2ba502e700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 [ 1601.187224] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1601.193114] CR2: 000000000056c000 CR3: 000000009bb68000 CR4: 00000000001406e0 [ 1601.200455] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1601.207721] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1601.214973] Call Trace: [ 1601.217552] ? apparmor_sb_mount+0x970/0x970 [ 1601.221951] ? nl802154_add_llsec_devkey+0x3e0/0x3e0 [ 1601.227039] ? nl802154_pre_doit+0xf8/0xcd0 [ 1601.231348] ? validate_nla+0x270/0x820 [ 1601.235320] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 1601.240415] ? nla_parse+0x1b2/0x290 [ 1601.244116] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 1601.249204] ? nl802154_dump_wpan_phy_done+0x40/0x40 [ 1601.254307] genl_family_rcv_msg+0x642/0xc40 [ 1601.258709] ? genl_rcv+0x40/0x40 [ 1601.262149] ? genl_rcv_msg+0x12f/0x160 [ 1601.266117] ? __mutex_add_waiter+0x160/0x160 [ 1601.270606] ? __radix_tree_lookup+0x216/0x370 [ 1601.275176] genl_rcv_msg+0xbf/0x160 [ 1601.278878] netlink_rcv_skb+0x160/0x440 [ 1601.282927] ? genl_family_rcv_msg+0xc40/0xc40 [ 1601.287497] ? netlink_ack+0xae0/0xae0 [ 1601.291388] ? genl_rcv+0x15/0x40 [ 1601.294832] genl_rcv+0x24/0x40 [ 1601.298110] netlink_unicast+0x4d5/0x690 [ 1601.302157] ? netlink_sendskb+0x110/0x110 [ 1601.306378] ? __check_object_size+0x17b/0x3e0 [ 1601.310950] netlink_sendmsg+0x6bb/0xc40 [ 1601.315009] ? nlmsg_notify+0x1a0/0x1a0 [ 1601.318969] ? kernel_recvmsg+0x220/0x220 [ 1601.323107] ? nlmsg_notify+0x1a0/0x1a0 [ 1601.327073] sock_sendmsg+0xc3/0x120 [ 1601.330778] ___sys_sendmsg+0x7bb/0x8e0 [ 1601.334740] ? copy_msghdr_from_user+0x440/0x440 [ 1601.339493] ? __fget+0x32f/0x510 [ 1601.342948] ? lock_downgrade+0x720/0x720 [ 1601.347088] ? check_preemption_disabled+0x41/0x280 [ 1601.352087] ? check_preemption_disabled+0x41/0x280 [ 1601.357087] ? __fget+0x356/0x510 [ 1601.360521] ? do_dup2+0x450/0x450 [ 1601.364046] ? _raw_spin_unlock_irq+0x24/0x80 [ 1601.368523] ? __fdget+0x1d0/0x230 [ 1601.372050] __x64_sys_sendmsg+0x132/0x220 [ 1601.376270] ? __sys_sendmsg+0x1b0/0x1b0 [ 1601.380340] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1601.385689] ? trace_hardirqs_off_caller+0x6e/0x210 [ 1601.390697] ? do_syscall_64+0x21/0x620 [ 1601.394655] do_syscall_64+0xf9/0x620 [ 1601.398439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1601.403629] RIP: 0033:0x466459 [ 1601.406803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1601.425702] RSP: 002b:00007f2ba502e188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.433394] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459 16:55:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000000)) 16:55:38 executing program 4: socket(0x0, 0x3, 0x5) [ 1601.440654] RDX: 0000000000008040 RSI: 00000000200000c0 RDI: 0000000000000005 [ 1601.447917] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000 [ 1601.455170] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 1601.462422] R13: 00007ffdbae0c5ef R14: 00007f2ba502e300 R15: 0000000000022000 [ 1601.469677] Modules linked in: [ 1601.475048] ---[ end trace d812478a4ab37d9a ]--- [ 1601.479850] RIP: 0010:nl802154_del_llsec_devkey+0x163/0x380 [ 1601.486665] Code: 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 ce 01 00 00 48 8b 93 20 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 4f [ 1601.518524] RSP: 0018:ffff8880753375e8 EFLAGS: 00010246 [ 1601.524284] RAX: dffffc0000000000 RBX: ffff8880b258b2c0 RCX: 0000000000000000 [ 1601.531576] RDX: 0000000000000000 RSI: ffffffff87c5964d RDI: ffff8880b258b3e0 [ 1601.554569] RBP: 1ffff1100ea66ebf R08: 0000000000000001 R09: ffff888075337920 [ 1601.569342] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888238014bc0 [ 1601.579218] R13: ffff8880ab5ad090 R14: ffff8880b258b2c0 R15: ffffffff89cf67c0 [ 1601.595072] FS: 00007f2ba502e700(0000) GS:ffff8880ba100000(0000) knlGS:0000000000000000 16:55:38 executing program 4: socket(0x0, 0x3, 0x5) 16:55:38 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x100, 0x0) ioctl$BLKTRACESETUP(r0, 0x4c04, &(0x7f0000000040)={[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) socket(0x18, 0x3, 0x7ff) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) [ 1601.606325] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1601.612873] CR2: 0000000000568000 CR3: 000000009bb68000 CR4: 00000000001406e0 [ 1601.625006] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1601.632295] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1601.656853] Kernel panic - not syncing: Fatal exception [ 1601.662953] Kernel Offset: disabled [ 1601.666575] Rebooting in 86400 seconds..