Warning: Permanently added '[localhost]:19833' (ECDSA) to the list of known hosts. 2026/01/14 19:16:32 fuzzer started 2026/01/14 19:16:32 dialing manager at localhost:46753 syzkaller login: [ 49.539538] cgroup: Unknown subsys name 'net' [ 49.609503] cgroup: Unknown subsys name 'cpuset' [ 49.624608] cgroup: Unknown subsys name 'rlimit' 2026/01/14 19:16:44 syscalls: 214 2026/01/14 19:16:44 code coverage: enabled 2026/01/14 19:16:44 comparison tracing: enabled 2026/01/14 19:16:44 extra coverage: enabled 2026/01/14 19:16:44 setuid sandbox: enabled 2026/01/14 19:16:44 namespace sandbox: enabled 2026/01/14 19:16:44 Android sandbox: enabled 2026/01/14 19:16:44 fault injection: enabled 2026/01/14 19:16:44 leak checking: enabled 2026/01/14 19:16:44 net packet injection: enabled 2026/01/14 19:16:44 net device setup: enabled 2026/01/14 19:16:44 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/14 19:16:44 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/14 19:16:44 USB emulation: enabled 2026/01/14 19:16:44 hci packet injection: enabled 2026/01/14 19:16:44 wifi device emulation: enabled 2026/01/14 19:16:44 802.15.4 emulation: enabled 2026/01/14 19:16:44 fetching corpus: 0, signal 0/0 (executing program) 2026/01/14 19:16:45 starting 8 fuzzer processes 19:16:45 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000880)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000008c0)='+-\x00', &(0x7f0000000900)='./file0\x00', r0) r8 = accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f00000009c0)={0x10}) 19:16:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000001880), 0x9, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000018c0)={0xaa, 0x2, 0xe9, "10d7b7784cdf896b151862c6a650439616d45c40a4367c0194be8aeaf2e4b800f0603b6e810d30be2b9a1103e18b863caddcb206a8a920b6998fd89c967c30f973a244d9b2a243b1a646fbc6f4b52ef07b3a00da176c48655074fdd0d3f2023c4b9a762036d3adb6c36667ac7c94d46db415a1a215e5eca9ec6f08f91c246bf6189dbd24625937b0e13ee5d37707215e72a130269c9fed3a93a83fdba6659fb3b4ef2474f9d88fe102ca"}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:16:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) [ 60.825482] audit: type=1400 audit(1768418205.490:7): avc: denied { execmem } for pid=272 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 19:16:45 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 19:16:45 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) r10 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000980)={{{@in=@broadcast, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r9, 0x29, 0x5, 0x0, 0x5, 0x71, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80c8, 0x1bc, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'gretap0\x00', r11, 0x80, 0x8, 0xfff, 0x7, {{0x10, 0x4, 0x2, 0x16, 0x40, 0x64, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x2c, 0xac, 0x0, 0x3, [0x5, 0xfffff323, 0x8, 0x0, 0xfffffffd, 0x8000, 0x0, 0x4, 0x6, 0x2]}]}}}}}) 19:16:45 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:16:45 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', r0, 0x4, 0x7, 0x6, 0x1ff, 0x5, @mcast2, @remote, 0x8000, 0x8000, 0x2, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', r0, 0x4, 0x80, 0x7, 0x80000001, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x7, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:16:45 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x66, 0x0, 0x1, 0xc6fca04f72d2c49e, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x44, [@rand_addr=0x1, @remote, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x4, [{@multicast1, 0x20}, {@private=0xa010100, 0x1}, {@multicast1, 0xfffffffe}, {@multicast1, 0xfffffff9}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)={0x7, 0xc21, 0x6, 0x3, 0x80, 0x3, 0x1b}, 0xc) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000540)=0x4) [ 61.918342] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.920418] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.922472] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.926562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.931266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.180335] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.182470] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.184632] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.186542] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.189189] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.192921] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.194467] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.198597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.199656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.216293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.244774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.254300] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.265287] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.281093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.284207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.301672] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.306637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.308920] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.324779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.328579] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.412392] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.422406] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.430300] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.431941] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.438161] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.457500] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.461579] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.466174] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.468768] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.472467] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.473671] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.476245] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.489772] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.494267] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.500516] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 63.948732] Bluetooth: hci0: command tx timeout [ 64.268116] Bluetooth: hci2: command tx timeout [ 64.268307] Bluetooth: hci1: command tx timeout [ 64.332467] Bluetooth: hci3: command tx timeout [ 64.397467] Bluetooth: hci4: command tx timeout [ 64.588164] Bluetooth: hci6: command tx timeout [ 64.588905] Bluetooth: hci7: command tx timeout [ 64.589072] Bluetooth: hci5: command tx timeout [ 65.996486] Bluetooth: hci0: command tx timeout [ 66.316873] Bluetooth: hci1: command tx timeout [ 66.319163] Bluetooth: hci2: command tx timeout [ 66.380173] Bluetooth: hci3: command tx timeout [ 66.444077] Bluetooth: hci4: command tx timeout [ 66.636663] Bluetooth: hci7: command tx timeout [ 66.637520] Bluetooth: hci6: command tx timeout [ 66.637657] Bluetooth: hci5: command tx timeout [ 68.045236] Bluetooth: hci0: command tx timeout [ 68.365062] Bluetooth: hci1: command tx timeout [ 68.365088] Bluetooth: hci2: command tx timeout [ 68.428119] Bluetooth: hci3: command tx timeout [ 68.494048] Bluetooth: hci4: command tx timeout [ 68.684101] Bluetooth: hci5: command tx timeout [ 68.684256] Bluetooth: hci7: command tx timeout [ 68.684880] Bluetooth: hci6: command tx timeout [ 70.092532] Bluetooth: hci0: command tx timeout [ 70.413376] Bluetooth: hci1: command tx timeout [ 70.414320] Bluetooth: hci2: command tx timeout [ 70.476119] Bluetooth: hci3: command tx timeout [ 70.540109] Bluetooth: hci4: command tx timeout [ 70.732964] Bluetooth: hci7: command tx timeout [ 70.733750] Bluetooth: hci5: command tx timeout [ 70.733799] Bluetooth: hci6: command tx timeout [ 103.093587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.094289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.370581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.371209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.925063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.925681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.112418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.113062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.586096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.586704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:17:29 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) [ 104.806577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.807224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.946446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.947326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.228281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.228996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.263665] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.270531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:17:29 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 19:17:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) [ 105.513939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.515290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.608684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.609483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.657856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.658482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.737664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.738344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.893877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.895210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.957253] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.957889] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.005243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.005869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:17:30 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:17:30 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 19:17:30 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:17:30 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', r0, 0x4, 0x7, 0x6, 0x1ff, 0x5, @mcast2, @remote, 0x8000, 0x8000, 0x2, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', r0, 0x4, 0x80, 0x7, 0x80000001, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x7, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:17:30 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) r10 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000980)={{{@in=@broadcast, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r9, 0x29, 0x5, 0x0, 0x5, 0x71, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80c8, 0x1bc, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'gretap0\x00', r11, 0x80, 0x8, 0xfff, 0x7, {{0x10, 0x4, 0x2, 0x16, 0x40, 0x64, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x2c, 0xac, 0x0, 0x3, [0x5, 0xfffff323, 0x8, 0x0, 0xfffffffd, 0x8000, 0x0, 0x4, 0x6, 0x2]}]}}}}}) [ 106.659671] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 19:17:43 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:17:43 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000880)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000008c0)='+-\x00', &(0x7f0000000900)='./file0\x00', r0) r8 = accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f00000009c0)={0x10}) 19:17:43 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) r10 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000980)={{{@in=@broadcast, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r9, 0x29, 0x5, 0x0, 0x5, 0x71, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80c8, 0x1bc, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'gretap0\x00', r11, 0x80, 0x8, 0xfff, 0x7, {{0x10, 0x4, 0x2, 0x16, 0x40, 0x64, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x2c, 0xac, 0x0, 0x3, [0x5, 0xfffff323, 0x8, 0x0, 0xfffffffd, 0x8000, 0x0, 0x4, 0x6, 0x2]}]}}}}}) 19:17:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000001880), 0x9, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000018c0)={0xaa, 0x2, 0xe9, "10d7b7784cdf896b151862c6a650439616d45c40a4367c0194be8aeaf2e4b800f0603b6e810d30be2b9a1103e18b863caddcb206a8a920b6998fd89c967c30f973a244d9b2a243b1a646fbc6f4b52ef07b3a00da176c48655074fdd0d3f2023c4b9a762036d3adb6c36667ac7c94d46db415a1a215e5eca9ec6f08f91c246bf6189dbd24625937b0e13ee5d37707215e72a130269c9fed3a93a83fdba6659fb3b4ef2474f9d88fe102ca"}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:43 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) 19:17:43 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x66, 0x0, 0x1, 0xc6fca04f72d2c49e, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x44, [@rand_addr=0x1, @remote, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x4, [{@multicast1, 0x20}, {@private=0xa010100, 0x1}, {@multicast1, 0xfffffffe}, {@multicast1, 0xfffffff9}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)={0x7, 0xc21, 0x6, 0x3, 0x80, 0x3, 0x1b}, 0xc) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000540)=0x4) 19:17:43 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', r0, 0x4, 0x7, 0x6, 0x1ff, 0x5, @mcast2, @remote, 0x8000, 0x8000, 0x2, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', r0, 0x4, 0x80, 0x7, 0x80000001, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x7, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:17:43 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) 19:17:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000001880), 0x9, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000018c0)={0xaa, 0x2, 0xe9, "10d7b7784cdf896b151862c6a650439616d45c40a4367c0194be8aeaf2e4b800f0603b6e810d30be2b9a1103e18b863caddcb206a8a920b6998fd89c967c30f973a244d9b2a243b1a646fbc6f4b52ef07b3a00da176c48655074fdd0d3f2023c4b9a762036d3adb6c36667ac7c94d46db415a1a215e5eca9ec6f08f91c246bf6189dbd24625937b0e13ee5d37707215e72a130269c9fed3a93a83fdba6659fb3b4ef2474f9d88fe102ca"}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:43 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x66, 0x0, 0x1, 0xc6fca04f72d2c49e, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x44, [@rand_addr=0x1, @remote, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x4, [{@multicast1, 0x20}, {@private=0xa010100, 0x1}, {@multicast1, 0xfffffffe}, {@multicast1, 0xfffffff9}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)={0x7, 0xc21, 0x6, 0x3, 0x80, 0x3, 0x1b}, 0xc) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000540)=0x4) 19:17:43 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000880)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000008c0)='+-\x00', &(0x7f0000000900)='./file0\x00', r0) r8 = accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f00000009c0)={0x10}) 19:17:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) r5 = syz_open_dev$sg(&(0x7f0000001880), 0x9, 0x80) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000018c0)={0xaa, 0x2, 0xe9, "10d7b7784cdf896b151862c6a650439616d45c40a4367c0194be8aeaf2e4b800f0603b6e810d30be2b9a1103e18b863caddcb206a8a920b6998fd89c967c30f973a244d9b2a243b1a646fbc6f4b52ef07b3a00da176c48655074fdd0d3f2023c4b9a762036d3adb6c36667ac7c94d46db415a1a215e5eca9ec6f08f91c246bf6189dbd24625937b0e13ee5d37707215e72a130269c9fed3a93a83fdba6659fb3b4ef2474f9d88fe102ca"}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:43 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x66, 0x0, 0x1, 0xc6fca04f72d2c49e, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x44, [@rand_addr=0x1, @remote, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x4, [{@multicast1, 0x20}, {@private=0xa010100, 0x1}, {@multicast1, 0xfffffffe}, {@multicast1, 0xfffffff9}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)={0x7, 0xc21, 0x6, 0x3, 0x80, 0x3, 0x1b}, 0xc) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000540)=0x4) 19:17:43 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000880)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000008c0)='+-\x00', &(0x7f0000000900)='./file0\x00', r0) r8 = accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f00000009c0)={0x10}) 19:17:43 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x66, 0x0, 0x1, 0xc6fca04f72d2c49e, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x44, [@rand_addr=0x1, @remote, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x4, [{@multicast1, 0x20}, {@private=0xa010100, 0x1}, {@multicast1, 0xfffffffe}, {@multicast1, 0xfffffff9}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000500)={0x7, 0xc21, 0x6, 0x3, 0x80, 0x3, 0x1b}, 0xc) 19:17:43 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', r0, 0x4, 0x7, 0x6, 0x1ff, 0x5, @mcast2, @remote, 0x8000, 0x8000, 0x2, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', r0, 0x4, 0x80, 0x7, 0x80000001, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x7, 0x0, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8, 0x1, r10}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:17:51 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', r0, 0x4, 0x7, 0x6, 0x1ff, 0x5, @mcast2, @remote, 0x8000, 0x8000, 0x2, 0xfffffffe}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', r0, 0x4, 0x80, 0x7, 0x80000001, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, @local, 0x8, 0x7, 0x0, 0x2}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:17:51 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:17:51 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) 19:17:51 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x1, 0x7800, 0x9, 0x2, {{0x1b, 0x4, 0x2, 0x0, 0x6c, 0x66, 0x0, 0x1, 0xc6fca04f72d2c49e, 0x0, @loopback, @multicast2, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0x44, [@rand_addr=0x1, @remote, @private=0xa010102, @multicast2, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}]}, @timestamp_addr={0x44, 0x34, 0x1d, 0x1, 0x4, [{@multicast1, 0x20}, {@private=0xa010100, 0x1}, {@multicast1, 0xfffffffe}, {@multicast1, 0xfffffff9}, {@local, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x3}]}]}}}}}) 19:17:51 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) r10 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000980)={{{@in=@broadcast, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r9, 0x29, 0x5, 0x0, 0x5, 0x71, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80c8, 0x1bc, 0x7ff}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000c00)={'syztnl1\x00', &(0x7f0000000b80)={'gretap0\x00', r11, 0x80, 0x8, 0xfff, 0x7, {{0x10, 0x4, 0x2, 0x16, 0x40, 0x64, 0x0, 0x7f, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x2c, 0xac, 0x0, 0x3, [0x5, 0xfffff323, 0x8, 0x0, 0xfffffffd, 0x8000, 0x0, 0x4, 0x6, 0x2]}]}}}}}) 19:17:51 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000880)) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f00000008c0)='+-\x00', &(0x7f0000000900)='./file0\x00', r0) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:17:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) syz_open_dev$sg(&(0x7f0000001880), 0x9, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:17:51 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) ioctl$CDROMGETSPINDOWN(r0, 0x531d, &(0x7f0000000880)) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:17:51 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000003c0)) 19:17:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x34, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x50) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:51 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780)=0x0, &(0x7f00000007c0)) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, 0x0, &(0x7f0000000840)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r5, 0x9, {0x0, r6}, 0x2, 0x1, 0x1, {0x0, 0x0, r7}}, 0x2) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:17:51 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) ioctl$TIOCSPTLCK(r2, 0x40045431, &(0x7f0000000380)=0xfffffff7) 19:17:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:17:51 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) syz_open_dev$ttys(0xc, 0x2, 0x0) 19:17:51 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:59 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) r10 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000980)={{{@in=@broadcast, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r9, 0x29, 0x5, 0x0, 0x5, 0x71, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x80c8, 0x1bc, 0x7ff}}) 19:17:59 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:17:59 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) syz_open_dev$ttys(0xc, 0x2, 0x0) 19:17:59 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:17:59 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) 19:17:59 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000280)={0xd0, 0x1, 0x3, "d1768638eb16205a0fb8ae6c17b7aea3a22af4007ab09e84eebaa6f4c46edbfd3e4959d6f187d639d2c8213dfc24a0f24f9113b18912c2008e3d9186f36eeea205f8c47a0ab5cccc04dc75a358b2d1cf98464124fc5f5a36fd5b0a02fc8f38478277c71e598803fa0ffecfa813e849a9c62474974bb85646e7eb3bc3d9edc682f5b99af79372a810086a7d882b355afaac6faca3ab92aabbfea983f1ee4e8b5b3b9d157dd021c1d4fa10421c184353be550b94715fd101edcbc6e22b90f24e1085fd3580696dceba230e2735761c76eb"}) 19:17:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) r4 = syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) epoll_pwait(r4, &(0x7f00000016c0)=[{}, {}, {}, {}, {}, {}], 0x6, 0xef, &(0x7f0000001740)={[0x8]}, 0x8) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:59 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'syztnl0\x00', r0, 0x4, 0x7, 0x6, 0x1ff, 0x5, @mcast2, @remote, 0x8000, 0x8000, 0x2, 0xfffffffe}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:17:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x2c, 0x0, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c050}, 0x10) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:59 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) openat$cgroup_procs(r3, &(0x7f0000000800)='cgroup.threads\x00', 0x2, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:17:59 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) 19:17:59 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:17:59 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) ioctl$CDROMPLAYMSF(r3, 0x5303, &(0x7f0000001580)={0x4, 0x5, 0x83, 0x5, 0xfe, 0x5}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:00 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r2 = syz_open_pts(r1, 0x1) ioctl$VT_DISALLOCATE(r2, 0x5608) 19:18:00 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) syz_io_uring_setup(0x50d3, &(0x7f0000000700)={0x0, 0xbd8c, 0x0, 0x3, 0x3d4}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000780), &(0x7f00000007c0)) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:06 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) r9 = socket$inet6(0xa, 0x1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000980)={{{@in=@broadcast, @in6=@private2}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000a80)=0xe8) 19:18:06 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) syz_open_dev$ttys(0xc, 0x2, 0x0) 19:18:06 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:06 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_open_pts(r1, 0x1) 19:18:06 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4000000, 0x13, r3, 0x0) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:06 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) syz_open_dev$sg(&(0x7f0000001540), 0x8001, 0x429880) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:06 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8040) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:06 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) r3 = fsmount(r0, 0x0, 0x8) accept4$bt_l2cap(r3, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) ioctl$SG_GET_COMMAND_Q(r2, 0x2270, &(0x7f0000001400)) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:07 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_open_pts(r1, 0x1) 19:18:07 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r7, 0x89f4, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl2\x00', r3, 0x4, 0x0, 0x81, 0x31b, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x20, 0x10, 0xdfc8905, 0x9}}) socket$inet6(0xa, 0x1, 0x9) 19:18:07 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000800)={{{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@remote}}, &(0x7f0000000900)=0xe8) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r7}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:15 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:15 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) r7 = fsmount(r5, 0x0, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000010) socket$inet6(0xa, 0x1, 0x9) 19:18:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000013c0)={'vxcan1\x00'}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:15 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_open_pts(r1, 0x1) 19:18:15 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:18:15 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:15 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:15 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xdc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7, 0x1f, 0x2, 0x5}, {0x4, 0x4, 0x9, 0x1}, {0x1f, 0xb3, 0x7, 0x7f}, {0x9, 0x6, 0xff, 0x10001}, {0xffff, 0x71, 0x0, 0x9}, {0x401, 0x6, 0xd0, 0x4}, {0x0, 0xfa, 0x3f, 0x3}, {0x4, 0x7, 0xa1, 0x8001}, {0x7, 0x8, 0x3, 0x7}]}}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:15 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:15 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x695}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040084}, 0x24000840) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) ioctl$SG_IO(r3, 0x2285, &(0x7f0000001340)={0x53, 0xfffffffffffffffb, 0x73, 0x0, @buffer={0x0, 0x1000, &(0x7f0000000180)=""/4096}, &(0x7f0000001180)="05af67248ed4a59d4547971dc3164a8b84e950db6f88019aabf460ee99d192b378824c8bdce90f9c9f7aa8c29044367eebe4b5c572084b19d129aa8bd6aeae14fff2b4405c67cf27d4e197680767074e65a01b22bb27be61453bcb30e39b6e7033ab6905e8b4a8fa5a0bd30659cb8770464fad", &(0x7f0000001200)=""/195, 0x0, 0x0, 0x2, &(0x7f0000001300)}) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:15 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r1, 0x100, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x38}}, 0x4003) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:15 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:15 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:15 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:18:24 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:24 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) fsmount(r5, 0x0, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) socket$inet6(0xa, 0x1, 0x9) 19:18:24 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:18:24 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:24 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:24 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x14, r4, 0x800, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4040001) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:24 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) r3 = fsmount(0xffffffffffffffff, 0x1, 0xf2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000140)) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:24 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000200)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:32 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:32 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) socket$nl_generic(0x10, 0x3, 0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:32 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xf2) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:32 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, 0x0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:32 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:18:32 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:32 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) fsmount(r5, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x9) 19:18:32 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:41 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) r1 = fsmount(0xffffffffffffffff, 0x1, 0x7a) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:41 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:41 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:41 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'tunl0\x00', r4, 0x7800, 0x8000, 0xb2a72c3d, 0x2, {{0xd, 0x4, 0x1, 0x0, 0x34, 0x68, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x95, [@local, @rand_addr=0x64010100, @private=0xa010100, @loopback]}, @ra={0x94, 0x4}, @generic={0x94, 0x6, "83ed0b43"}]}}}}}) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r5, 0x0) 19:18:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) fsmount(0xffffffffffffffff, 0x1, 0xf2) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:41 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x101}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x24008000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:41 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) fsmount(r5, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x9) 19:18:41 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:41 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:41 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) fsmount(0xffffffffffffffff, 0x1, 0x7a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) r2 = syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r2, 0x2) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:41 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) fsmount(0xffffffffffffffff, 0x1, 0x7a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:42 executing program 0: r0 = memfd_secret(0x80000) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x40}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:42 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:18:42 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:42 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:42 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) fsmount(r5, 0x0, 0x4) socket$inet6(0xa, 0x1, 0x9) 19:18:42 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:42 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) fsmount(0xffffffffffffffff, 0x1, 0x7a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:50 executing program 0: memfd_secret(0x80000) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = socket(0xb, 0x6, 0x7) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r7, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x8000) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:50 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000050}, 0x4000000) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:50 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:50 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'syztnl2\x00', 0x0, 0x29, 0xfb, 0x6, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8000, 0x3f, 0x9}}) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:18:50 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3fb, 0x2, 0x70bd2a, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) socket$inet6(0xa, 0x1, 0x9) 19:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:50 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) timerfd_gettime(r3, &(0x7f0000000640)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:50 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000140)) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:18:50 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000980)=0xe, 0x80000) 19:18:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:50 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) r5 = fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000640)={'syztnl2\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r6, 0x2f, 0x1, 0xa1, 0x7, 0x20, @remote, @mcast2, 0x7800, 0x8000, 0x3f, 0x1}}) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) socket$inet6(0xa, 0x1, 0x9) 19:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:18:50 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x64, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xcc}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xefd5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc91}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4001}, 0x404c041) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r5, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r6, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:18:50 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:18:50 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0x80000) 19:18:50 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) socket(0xb, 0x6, 0x7) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:18:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:18:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, 0xfffffffffffffffe, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) [ 187.857395] Bluetooth: hci0: command 0x0406 tx timeout [ 187.857582] Bluetooth: hci4: command 0x0406 tx timeout [ 187.858857] Bluetooth: hci1: command 0x0406 tx timeout [ 187.859490] Bluetooth: hci2: command 0x0406 tx timeout [ 187.860357] Bluetooth: hci7: command 0x0406 tx timeout [ 187.861921] Bluetooth: hci3: command 0x0406 tx timeout [ 187.862239] Bluetooth: hci5: command 0x0406 tx timeout [ 187.863267] Bluetooth: hci6: command 0x0406 tx timeout 19:19:00 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000100)=0x6) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:00 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) 19:19:00 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:19:00 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:19:00 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r3, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r4 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) fsmount(0xffffffffffffffff, 0x0, 0xf0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000580)={'sit0\x00', &(0x7f0000000500)={'ip6_vti0\x00', r2, 0x4, 0x0, 0x0, 0x6, 0x22, @private2, @private1, 0x7800, 0x40, 0x2, 0x8000}}) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r4) socket$inet6(0xa, 0x1, 0x9) 19:19:00 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:19:00 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:19:00 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:19:00 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000080)={0x50, ""/80}) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:09 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:09 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r2, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r3 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) fsmount(0xffffffffffffffff, 0x0, 0xf0) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r3) socket$inet6(0xa, 0x1, 0x9) 19:19:09 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:19:09 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = memfd_secret(0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), r3) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r5, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:19:09 executing program 1: syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:19:09 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:19:09 executing program 0: accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) 19:19:09 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:19:09 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:09 executing program 1: syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:19:10 executing program 0: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:10 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:10 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:19:10 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:19:10 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000980)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0x8) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:19:10 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000340)={0x10000000f}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r5, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl0\x00', r3, 0x29, 0x4, 0x3f, 0xffffffff, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x20, 0x8000, 0x5, 0x4983}}) ioctl$CDROM_TIMED_MEDIA_CHANGE(r4, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:19:10 executing program 1: syz_open_dev$sg(&(0x7f0000000100), 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) [ 205.643444] [ 205.643682] ===================================== [ 205.644196] WARNING: bad unlock balance detected! [ 205.644692] 6.19.0-rc5-next-20260114 #1 Not tainted [ 205.645215] ------------------------------------- [ 205.645717] syz-executor.5/4791 is trying to release lock (rcu_read_lock) at: [ 205.646451] [] __wait_on_freeing_inode+0x105/0x350 [ 205.647122] but there are no more locks to release! [ 205.647623] [ 205.647623] other info that might help us debug this: [ 205.648278] 4 locks held by syz-executor.5/4791: [ 205.650979] #0: ffff88800f9863f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 205.653280] #1: ffff888017b72a00 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 205.654333] #2: ffff88800fa2a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 205.655290] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 205.656276] [ 205.656276] stack backtrace: [ 205.656744] CPU: 1 UID: 0 PID: 4791 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 205.656762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 205.656772] Call Trace: [ 205.656777] [ 205.656783] dump_stack_lvl+0xca/0x120 [ 205.656818] ? __wait_on_freeing_inode+0x105/0x350 [ 205.656837] print_unlock_imbalance_bug+0x118/0x130 [ 205.656857] ? __wait_on_freeing_inode+0x105/0x350 [ 205.656876] lock_release+0x1ee/0x270 [ 205.656896] __wait_on_freeing_inode+0x10a/0x350 [ 205.656916] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 205.656937] ? __pfx_var_wake_function+0x10/0x10 [ 205.656960] ? lock_is_held_type+0x9e/0x120 [ 205.656985] insert_inode_locked+0x25f/0x890 [ 205.657008] __ext4_new_inode+0x223d/0x4cd0 [ 205.657030] ? __pfx___ext4_new_inode+0x10/0x10 [ 205.657059] ? __pfx___dquot_initialize+0x10/0x10 [ 205.657083] ? __pfx_avc_has_perm+0x10/0x10 [ 205.657104] ext4_symlink+0x623/0xb40 [ 205.657129] ? __pfx_ext4_symlink+0x10/0x10 [ 205.657150] ? security_inode_permission+0x72/0xe0 [ 205.657167] vfs_symlink+0x44b/0x840 [ 205.657189] do_symlinkat+0x153/0x440 [ 205.657208] ? __pfx_do_symlinkat+0x10/0x10 [ 205.657225] ? strncpy_from_user+0x21b/0x2f0 [ 205.657247] __x64_sys_symlink+0x79/0xa0 [ 205.657265] do_syscall_64+0xbf/0x420 [ 205.657281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.657298] RIP: 0033:0x7f9b5c559427 [ 205.657310] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.657324] RSP: 002b:00007ffe5e376548 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 205.657339] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b5c559427 [ 205.657349] RDX: 00007ffe5e376623 RSI: 00007f9b5c5b4022 RDI: 00007ffe5e376610 [ 205.657359] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe5e3763e0 [ 205.657368] R10: 00007ffe5e376297 R11: 0000000000000206 R12: 0000000000000001 [ 205.657377] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe5e376610 [ 205.657391] [ 205.677361] ------------[ cut here ]------------ [ 205.677857] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.5/4791 [ 205.696624] Modules linked in: [ 205.697003] CPU: 1 UID: 0 PID: 4791 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 205.728497] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 205.730104] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 205.730687] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 205.733109] RSP: 0018:ffff888046f1f9a0 EFLAGS: 00010286 [ 205.733630] RAX: 00000000ffffffff RBX: ffff88804a9a9b80 RCX: ffffffff81565a27 [ 205.734361] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88804a9a9f7c [ 205.735093] RBP: ffff88804a9a9b80 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 205.735766] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804a9a9b80 [ 205.736506] R13: 0000000000000001 R14: ffffffff85c0d600 R15: ffff88801c3ba938 [ 205.737276] FS: 0000555555d2c400(0000) GS:ffff8880e5443000(0000) knlGS:0000000000000000 [ 205.738120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 205.738695] CR2: 0000555555d2c708 CR3: 000000004c3a0000 CR4: 0000000000350ef0 [ 205.739436] Call Trace: [ 205.739726] [ 205.740616] __wait_on_freeing_inode+0x10f/0x350 [ 205.741486] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 205.742796] ? __pfx_var_wake_function+0x10/0x10 [ 205.744338] ? lock_is_held_type+0x9e/0x120 [ 205.745694] insert_inode_locked+0x25f/0x890 [ 205.747692] __ext4_new_inode+0x223d/0x4cd0 [ 205.750728] ? __pfx___ext4_new_inode+0x10/0x10 [ 205.752249] ? __pfx___dquot_initialize+0x10/0x10 [ 205.753190] ? __pfx_avc_has_perm+0x10/0x10 [ 205.755352] ext4_symlink+0x623/0xb40 [ 205.758121] ? __pfx_ext4_symlink+0x10/0x10 [ 205.759338] ? security_inode_permission+0x72/0xe0 [ 205.761319] vfs_symlink+0x44b/0x840 [ 205.762839] do_symlinkat+0x153/0x440 [ 205.764201] ? __pfx_do_symlinkat+0x10/0x10 [ 205.765093] ? strncpy_from_user+0x21b/0x2f0 [ 205.767355] __x64_sys_symlink+0x79/0xa0 [ 205.768247] do_syscall_64+0xbf/0x420 [ 205.769223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.769851] RIP: 0033:0x7f9b5c559427 [ 205.770340] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 205.772124] RSP: 002b:00007ffe5e376548 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 205.772827] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9b5c559427 [ 205.773559] RDX: 00007ffe5e376623 RSI: 00007f9b5c5b4022 RDI: 00007ffe5e376610 [ 205.774304] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe5e3763e0 [ 205.774996] R10: 00007ffe5e376297 R11: 0000000000000206 R12: 0000000000000001 [ 205.775709] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe5e376610 [ 205.778827] [ 205.779112] irq event stamp: 779 [ 205.779440] hardirqs last enabled at (779): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 205.780460] hardirqs last disabled at (778): [] _raw_spin_lock_irqsave+0x53/0x60 [ 205.781431] softirqs last enabled at (774): [] kernel_fpu_end+0x59/0x70 [ 205.782328] softirqs last disabled at (772): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 205.783288] ---[ end trace 0000000000000000 ]--- 19:19:17 executing program 4: ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x20, 0x7, 0x40, @empty, @dev={0xfe, 0x80, '\x00', 0xa}, 0x3bc0, 0x20, 0x3, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r0, 0x29, 0x7, 0xfd, 0x1ff, 0x9, @empty, @private2, 0xf880, 0x8000, 0x2b3d23ce, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', r1, 0x2f, 0x2, 0x5, 0x3, 0x11, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x409377586f925a1e, 0x790, 0x80000000}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000280)={'tunl0\x00', r1, 0x1, 0x8000, 0x2, 0x40, {{0x2c, 0x4, 0x0, 0x1a, 0xb0, 0x64, 0x0, 0x9, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x18, 0xbe, 0x0, 0x8, [0x4, 0x7, 0x101, 0x10000, 0x80000000]}, @cipso={0x86, 0xc, 0x3, [{0x5, 0x6, "84ac8e2d"}]}, @timestamp_prespec={0x44, 0x1c, 0x73, 0x3, 0x5, [{@multicast1, 0x4040000}, {@rand_addr=0x64010102, 0x5}, {@multicast1, 0x9}]}, @noop, @timestamp_prespec={0x44, 0x44, 0xd0, 0x3, 0xa, [{@remote, 0x1f}, {@loopback, 0x7fffffff}, {@rand_addr=0x64010101, 0x4}, {@remote, 0x3ff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private=0xa010102, 0x28fe94a7}, {@remote}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffff}]}, @end, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x60, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x35}, 0x67c}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', r2, 0x29, 0x1, 0x1, 0x56, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x23}, 0x10, 0x7811, 0x40, 0x40}}) r3 = socket(0x10, 0x1, 0x2) getsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000480), &(0x7f00000004c0)=0x4) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r3) socket$inet6(0xa, 0x1, 0x9) 19:19:17 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:17 executing program 0: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x80, 0x1f, 0x200, 0x10, @mcast1, @mcast1, 0x7, 0x7800, 0x8, 0x800}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x99}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xc7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008044}, 0x4001) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x505}]}, 0x34}}, 0x4000040) r1 = socket(0x2, 0x1, 0x9) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x407}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x44}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socketpair(0x26, 0x80000, 0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x154, 0x14, 0x200, 0x70bd29, 0x25dfdbff, {0x91a5413b5cc244c, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "3750924042a65b620603a91c747de3552f71b8db4b3ad8a883b6981f6ea662de6002f9d7ab2f4f85d56562c4d24b408e631287f69fb2ee294cdc691c2f30f313aacc8332fe006b73dde986032a5a43be975cc929ae6e56f57f6e041abad05cf3b0ce504750898724944ba7c42dcf4801dbefa2a24626a065cf0b382f9c63379afe0f9e98b3921a7c3a580d388c9f99bb39cbc2e3625f45"}, @INET_DIAG_REQ_BYTECODE={0x9f, 0x1, "1cd52662f6a382661bb2b2a1b9e098d6947be0e5c89f3803b8c573b853c8da0ac37f0475a2b384dd4ede339e5c6465ca0cbe08ffce28b2ea1177efca8ddf19c4923dc04bb8679d024796e363592ee66a974bfbb56992788078ec39ea25b8648afd74040e991ba6fc7210b5eb1070fc4071c11360d2581d3ce7cbf3efda084340aefab4737dc4da2a657c38596d0d6052b9d195f5a2ea35aa139f01"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x400000c5}, 0x20000000) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000740), 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x41}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004090}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) socket(0xb, 0x6, 0x7) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), r3) ioctl$CDROMPLAYMSF(r1, 0x5303, &(0x7f0000000b00)={0x6, 0xed, 0x1, 0x5, 0x7f, 0x4}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4804) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000000e00)={&(0x7f0000000d40), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) 19:19:17 executing program 6: setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000)=0x4, 0x4) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x10, 0x70bd2c, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x34000840}, 0x20008880) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0xf881, 0x20, 0x9, 0x0, {{0x38, 0x4, 0x3, 0x8, 0xe0, 0x68, 0x0, 0x81, 0x2f, 0x0, @broadcast, @loopback, {[@cipso={0x86, 0xd, 0xffffffffffffffff, [{0x6, 0x7, "4299fe023b"}]}, @rr={0x7, 0x7, 0x3b, [@remote]}, @cipso={0x86, 0xe, 0x0, [{0x2, 0x8, "22cc34e65f64"}]}, @ssrr={0x89, 0xf, 0x9c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @private=0xa010101]}, @ssrr={0x89, 0x13, 0x7f, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @private=0xa010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x27, 0x3, [{0x5, 0xc, "187aeb1b0a36402f95b7"}, {0x2, 0xe, "301481c6b91fcc43c1a1ca09"}, {0x5, 0x2}, {0x2, 0x3, "9b"}, {0x1, 0x2}]}, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x34, 0x1e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x81}, {@broadcast, 0x66a2}, {@multicast2, 0x1}, {@remote, 0x1}, {@remote, 0x81}, {@remote, 0x40}]}, @end, @timestamp={0x44, 0x18, 0xe1, 0x0, 0x1, [0x9, 0x1, 0x3, 0x20, 0xffffb2a9]}]}}}}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x804d2004}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x66}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xb}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x94d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0xc060) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000001d00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001040)={0xc50, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x570}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x128, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9c}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfd}}, {0x8, 0x6, r0}}}]}}, {{0x8, 0x1, r0}, {0x130, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x895f, 0x7e, 0x11, 0x2}, {0x77, 0x1, 0x3, 0x80}, {0xfffd, 0x78, 0x80, 0x10000}, {0x8, 0x8, 0x3, 0x3f}, {0x7, 0x1f, 0x1f, 0xce8}, {0xff, 0x2, 0x10, 0x5}, {0x1f, 0x4, 0x5, 0x5}, {0x6, 0x1, 0x2, 0x45c}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}}]}}, {{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x93}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r0}, {0x28c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x8, 0x7f, 0x3, 0x8}, {0x0, 0x4, 0x5, 0x9}, {0x0, 0x20, 0x7, 0x7c5e}, {0x656, 0x6, 0x81, 0xfe9}, {0xffff, 0x3, 0x0, 0x7fffffff}, {0x6, 0x8, 0x0, 0x76}, {0x40, 0x0, 0x6, 0x8000}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xba}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0xc50}, 0x1, 0x0, 0x0, 0x40000000}, 0x8004) 19:19:17 executing program 3: ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x4, 0x80, 0x0, 0x1, 0x28, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x8000, 0x40, 0x7fffffff, 0x200}}) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f00000000c0)) socketpair(0x6, 0xa, 0xcd2, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xfdbd}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6d}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000014}, 0x810) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', r0, 0x2f, 0x9, 0x62, 0x401, 0x22, @mcast1, @mcast2, 0x700, 0x20, 0x2, 0x6}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000340)={0x10000000f}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl1\x00', r0, 0x20, 0x80, 0x1, 0x81, {{0xc, 0x4, 0x0, 0x5, 0x30, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x17, 0x40, [@multicast2, @remote, @loopback, @local, @local]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x64, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x12be}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xe9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x40008d2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x34, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008800) ioctl$CDROM_TIMED_MEDIA_CHANGE(r3, 0x5396, &(0x7f00000008c0)={0x9}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000900)={'syztnl2\x00', r0, 0x2f, 0x3, 0xb1, 0x2, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x8000, 0x20, 0x8, 0x6}}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000009c0)={'lo\x00'}) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000a00)) syz_io_uring_setup(0x129d, &(0x7f0000000a40)={0x0, 0x8b8e, 0x8, 0x3, 0x208}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000ac0), &(0x7f0000000b00)) 19:19:17 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:19:17 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000640)) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) 19:19:18 executing program 7: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:18 executing program 0: ioctl$SG_GET_TIMEOUT(0xffffffffffffffff, 0x2202, 0x0) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000000)=0x1) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x20002) ioctl$SCSI_IOCTL_START_UNIT(0xffffffffffffffff, 0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) 19:19:18 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(0x0, 0x8, 0x80) mount$9p_fd(0x0, &(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), 0x8044d6, &(0x7f0000001a40)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}], [{@context={'context', 0x3d, 'unconfined_u'}}, {@obj_role={'obj_role', 0x3d, 'vxcan1\x00'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x81}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'vxcan1\x00'}}]}}) 19:19:18 executing program 5: r0 = socket(0x25, 0x3, 0x800) sendmsg$AUDIT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x200, 0x70bd26, 0x25dfdbff, "", ["", "", ""]}, 0x10}}, 0x4000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40055}, 0x4890) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x0, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r1 = socket(0xb, 0xa, 0x8) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x44, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x44}}, 0x4000081) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000006, 0x8010, 0xffffffffffffffff, 0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xed) syz_io_uring_submit(r2, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x6000, @fd=r3, 0x2, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x1) ioctl$TIOCMBIC(r3, 0x5417, &(0x7f00000004c0)=0x9) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000500)=0x94) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3fb, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x851}, 0x44084) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000840)) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_pts(r4, 0x0) VM DIAGNOSIS: 19:19:10 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffea0000b3a500 RCX=ffffffff819f681f RDX=ffff888016818000 RSI=0000000000000008 RDI=ffffea0000b3a500 RBP=ffffea0000b3a500 RSP=ffff88801b1b7590 R8 =0000000000000001 R9 =fffff940001674a6 R10=0000000000000000 R11=ffff88800db7de71 R12=0000000000000000 R13=ffffea0000b3a530 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81b3d0e0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555565aa3400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe0e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d721000 CR3=000000000d890000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000ff00000000000000000000ff XMM01=6b636f73007269617074656b636f7300 XMM02=000000ff000000000000000000000000 XMM03=00007f470cc977c800007f470cc977c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff82973870 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff888046f1f490 R8 =0000000000000001 R9 =ffffed1008de3e83 R10=0000000000000000 R11=666666203a302320 R12=0000000000000060 R13=ffffffff889c0970 R14=ffffffff889c0920 R15=ffffffff889c0be0 RIP=ffffffff829738c5 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555d2c400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555555d2c708 CR3=000000004c3a0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000