Warning: Permanently added '[localhost]:57024' (ECDSA) to the list of known hosts. 2026/01/15 06:22:22 fuzzer started 2026/01/15 06:22:22 dialing manager at localhost:46753 syzkaller login: [ 49.526661] cgroup: Unknown subsys name 'net' [ 49.590889] cgroup: Unknown subsys name 'cpuset' [ 49.607334] cgroup: Unknown subsys name 'rlimit' 2026/01/15 06:22:33 syscalls: 209 2026/01/15 06:22:33 code coverage: enabled 2026/01/15 06:22:33 comparison tracing: enabled 2026/01/15 06:22:33 extra coverage: enabled 2026/01/15 06:22:33 setuid sandbox: enabled 2026/01/15 06:22:33 namespace sandbox: enabled 2026/01/15 06:22:33 Android sandbox: enabled 2026/01/15 06:22:33 fault injection: enabled 2026/01/15 06:22:33 leak checking: enabled 2026/01/15 06:22:33 net packet injection: enabled 2026/01/15 06:22:33 net device setup: enabled 2026/01/15 06:22:33 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/15 06:22:33 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/15 06:22:33 USB emulation: enabled 2026/01/15 06:22:33 hci packet injection: enabled 2026/01/15 06:22:33 wifi device emulation: enabled 2026/01/15 06:22:33 802.15.4 emulation: enabled 2026/01/15 06:22:33 fetching corpus: 0, signal 0/0 (executing program) 2026/01/15 06:22:34 starting 8 fuzzer processes 06:22:34 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = fsmount(r0, 0x1, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) mq_notify(r8, &(0x7f00000008c0)={0x0, 0x32, 0x0, @thr={&(0x7f00000007c0)="f533612dcda364545dd130ce79fb108821edf3981127497767c7bd4d0d6ed9a23618d0d41288f9b0b4a485c51d34d4b4685ed0216c2a7d26ff735a1f5afb5af57ce54a63521abaea72af9cf5c69c0644623935b0f15aa19ca3146f86da6aa5177bca9c07ff056dcee45a9cd7bed0ceda9a296ddfefe946454f644934b28a1f5e97", &(0x7f0000000880)="4e600ac9"}}) 06:22:34 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) setns(r5, 0x24020000) r6 = fsmount(r5, 0x0, 0x3) mq_timedreceive(r6, &(0x7f0000000800)=""/106, 0x6a, 0x9, &(0x7f0000000880)={0x77359400}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:22:34 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000014) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x5) 06:22:34 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000104}, 0x4000011) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4004000) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 06:22:34 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x833}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000015) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000c80)) keyctl$clear(0x7, r4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:22:34 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000003c0)) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:22:34 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080804}, 0x1) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80030000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003480)) 06:22:34 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48075}, 0x20000800) [ 60.345798] audit: type=1400 audit(1768458154.795:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 61.497331] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.500579] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.502913] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.504403] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.506347] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.508643] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.510571] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.514353] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.517518] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.523009] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.567534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.576242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.578050] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.582321] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.584263] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.586567] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.592772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.595364] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.606856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.612400] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.618243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.620308] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.628563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.629629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.646744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.653226] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 61.657207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 61.664271] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 61.665245] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 61.668021] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 61.670889] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 61.673332] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 61.681266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 61.683045] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 61.685240] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 61.689869] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 61.691714] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 61.719579] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 61.723877] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 61.725317] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 63.587743] Bluetooth: hci0: command tx timeout [ 63.588692] Bluetooth: hci1: command tx timeout [ 63.715299] Bluetooth: hci5: command tx timeout [ 63.716178] Bluetooth: hci3: command tx timeout [ 63.716205] Bluetooth: hci2: command tx timeout [ 63.717118] Bluetooth: hci4: command tx timeout [ 63.779177] Bluetooth: hci7: command tx timeout [ 63.780874] Bluetooth: hci6: command tx timeout [ 65.635039] Bluetooth: hci0: command tx timeout [ 65.635646] Bluetooth: hci1: command tx timeout [ 65.763067] Bluetooth: hci3: command tx timeout [ 65.763654] Bluetooth: hci2: command tx timeout [ 65.764256] Bluetooth: hci5: command tx timeout [ 65.764782] Bluetooth: hci4: command tx timeout [ 65.827080] Bluetooth: hci7: command tx timeout [ 65.827622] Bluetooth: hci6: command tx timeout [ 67.685287] Bluetooth: hci1: command tx timeout [ 67.685739] Bluetooth: hci0: command tx timeout [ 67.811096] Bluetooth: hci2: command tx timeout [ 67.811542] Bluetooth: hci4: command tx timeout [ 67.811924] Bluetooth: hci3: command tx timeout [ 67.812335] Bluetooth: hci5: command tx timeout [ 67.875634] Bluetooth: hci6: command tx timeout [ 67.876090] Bluetooth: hci7: command tx timeout [ 69.731013] Bluetooth: hci0: command tx timeout [ 69.731476] Bluetooth: hci1: command tx timeout [ 69.859991] Bluetooth: hci3: command tx timeout [ 69.860456] Bluetooth: hci5: command tx timeout [ 69.860847] Bluetooth: hci4: command tx timeout [ 69.861267] Bluetooth: hci2: command tx timeout [ 69.923011] Bluetooth: hci6: command tx timeout [ 69.923475] Bluetooth: hci7: command tx timeout [ 93.804303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.830475] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.296753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.315000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.586651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.587420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.833993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.834646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.992805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.993479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.059182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.059818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:23:11 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48075}, 0x20000800) [ 97.299685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.300314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.393454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.394078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:23:11 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) setns(r5, 0x24020000) r6 = fsmount(r5, 0x0, 0x3) mq_timedreceive(r6, &(0x7f0000000800)=""/106, 0x6a, 0x9, &(0x7f0000000880)={0x77359400}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 97.475843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.476502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:23:11 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48075}, 0x20000800) 06:23:11 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) setns(r5, 0x24020000) r6 = fsmount(r5, 0x0, 0x3) mq_timedreceive(r6, &(0x7f0000000800)=""/106, 0x6a, 0x9, &(0x7f0000000880)={0x77359400}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:11 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) setns(r5, 0x24020000) r6 = fsmount(r5, 0x0, 0x3) mq_timedreceive(r6, &(0x7f0000000800)=""/106, 0x6a, 0x9, &(0x7f0000000880)={0x77359400}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 97.600988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.601633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:23:12 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) setns(r5, 0x24020000) fsmount(r5, 0x0, 0x3) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 97.672263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.672877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:23:12 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) setns(r5, 0x24020000) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:12 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) mq_open(&(0x7f0000000780)='-,:\x00', 0x2, 0x101, &(0x7f00000007c0)={0x8, 0x7, 0x1, 0x7fff}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) [ 97.805362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.806038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.947888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.951016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.019477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.020136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.046457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.047048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.069337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.069906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:23:22 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:22 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080804}, 0x1) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80030000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003480)) 06:23:22 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = fsmount(r0, 0x1, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) mq_notify(r8, &(0x7f00000008c0)={0x0, 0x32, 0x0, @thr={&(0x7f00000007c0)="f533612dcda364545dd130ce79fb108821edf3981127497767c7bd4d0d6ed9a23618d0d41288f9b0b4a485c51d34d4b4685ed0216c2a7d26ff735a1f5afb5af57ce54a63521abaea72af9cf5c69c0644623935b0f15aa19ca3146f86da6aa5177bca9c07ff056dcee45a9cd7bed0ceda9a296ddfefe946454f644934b28a1f5e97", &(0x7f0000000880)="4e600ac9"}}) 06:23:22 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000014) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x5) 06:23:22 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000104}, 0x4000011) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4004000) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 06:23:22 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r5 = fsmount(0xffffffffffffffff, 0x1, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r5) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, r7, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48075}, 0x20000800) 06:23:22 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x833}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000015) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000c80)) keyctl$clear(0x7, r4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:22 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000003c0)) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:22 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = fsmount(r0, 0x1, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) mq_notify(r8, &(0x7f00000008c0)={0x0, 0x32, 0x0, @thr={&(0x7f00000007c0)="f533612dcda364545dd130ce79fb108821edf3981127497767c7bd4d0d6ed9a23618d0d41288f9b0b4a485c51d34d4b4685ed0216c2a7d26ff735a1f5afb5af57ce54a63521abaea72af9cf5c69c0644623935b0f15aa19ca3146f86da6aa5177bca9c07ff056dcee45a9cd7bed0ceda9a296ddfefe946454f644934b28a1f5e97", &(0x7f0000000880)="4e600ac9"}}) 06:23:22 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000003c0)) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:30 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x833}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000015) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000c80)) keyctl$clear(0x7, r4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:30 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) openat$rtc(0xffffffffffffff9c, &(0x7f0000000600), 0x400800, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:30 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = fsmount(r0, 0x1, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) mq_notify(r8, &(0x7f00000008c0)={0x0, 0x32, 0x0, @thr={&(0x7f00000007c0)="f533612dcda364545dd130ce79fb108821edf3981127497767c7bd4d0d6ed9a23618d0d41288f9b0b4a485c51d34d4b4685ed0216c2a7d26ff735a1f5afb5af57ce54a63521abaea72af9cf5c69c0644623935b0f15aa19ca3146f86da6aa5177bca9c07ff056dcee45a9cd7bed0ceda9a296ddfefe946454f644934b28a1f5e97", &(0x7f0000000880)="4e600ac9"}}) 06:23:30 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:23:30 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000104}, 0x4000011) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4004000) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 06:23:30 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000003c0)) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:30 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000014) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x5) 06:23:30 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080804}, 0x1) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80030000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003480)) 06:23:30 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x6, @none, 0x5, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:31 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000104}, 0x4000011) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4004000) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 06:23:31 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = fsmount(r0, 0x1, 0x80) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x1) 06:23:31 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) mq_notify(r2, &(0x7f0000000580)={0x0, 0x16, 0x4, @tid=0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:31 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r6, 0x54a3) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:31 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080804}, 0x1) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80030000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000003480)) 06:23:31 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x833}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000015) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000c80)) keyctl$clear(0x7, r4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:38 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000014) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r8, 0x8, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x5) 06:23:38 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080804}, 0x1) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)={0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r7, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x80030000}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 06:23:38 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x2001, 0x0) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:38 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000104}, 0x4000011) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}}, 0x4004000) 06:23:38 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:23:38 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000500)='\x00', &(0x7f0000000540)='./file0\x00', r5) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:38 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x833}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000015) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r7, 0x80585414, &(0x7f0000000c80)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:38 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) fsmount(r0, 0x1, 0x80) 06:23:38 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) mq_getsetattr(r5, &(0x7f0000000480)={0x3, 0x3, 0x6, 0xfff}, &(0x7f00000004c0)) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:38 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x24, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x833}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x24000015) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:47 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:23:47 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000640), 0x141040) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:23:47 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) syz_genetlink_get_family_id$tipc(&(0x7f0000000b80), r7) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000440), 0x288a00, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:47 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r9, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffe}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000104}, 0x4000011) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:23:47 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x34, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_O_TEI={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080804}, 0x1) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:23:47 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000000340)={0x8, 0x8, 0x0, {r5}}, 0x20) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:47 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r7, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20000014) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:23:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) clock_gettime(0x1, &(0x7f0000000400)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:47 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:23:47 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) r5 = fsmount(r3, 0x1, 0x1) mq_notify(r5, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:47 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r6, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x30, r5, 0x30, 0x927, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x17, 0x9, @l2={'ib', 0x3a, 'sit0\x00'}}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040810}, 0x8000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:47 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000780), r7) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:23:47 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x200102, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:23:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:47 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:23:47 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) setns(r0, 0x8000000) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:23:47 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) mq_timedsend(r2, &(0x7f0000000240)="127ca4b9cb99915c18", 0x9, 0x100000000, &(0x7f00000002c0)={r3, r4+60000000}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:47 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), r1) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:23:47 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0, 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x4c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5d}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x19}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_PID={0x8, 0x52, r7}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000034}, 0x11) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:23:48 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r5, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a00), 0x100, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:48 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:23:48 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) r3 = fsmount(r2, 0x1, 0x12) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r4, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f00000002c0)) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:56 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000280)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:56 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:23:56 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x101, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4008801) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:23:56 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) fsmount(r2, 0x1, 0x12) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r3, &(0x7f00000001c0)=""/244, 0xf4) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x4) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:56 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x17, 0x3, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20008050}, 0x24000820) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:23:56 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:23:56 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r5, r0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000440)=""/142, 0x8e, 0x1, &(0x7f0000000500)={0x0, 0x3938700}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:23:56 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:23:56 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:23:56 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) mq_open(&(0x7f00000001c0)='\x00', 0x2, 0x3, &(0x7f0000000200)={0x0, 0xb9c7, 0x2, 0x4}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:23:56 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:23:56 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 06:23:56 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) fsmount(r2, 0x1, 0x12) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) getdents64(r3, &(0x7f00000001c0)=""/244, 0xf4) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:23:56 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000140)={0xd640000000000000, 0x8, 0x60f2a6ce}, &(0x7f0000000180)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:24:04 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:04 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:04 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/149, 0x95, 0x5, &(0x7f0000000100)={r0, r1+60000000}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:24:04 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 06:24:04 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:24:04 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000600)={'tunl0\x00', &(0x7f0000000580)={'erspan0\x00', 0x0, 0x10, 0xf876, 0x8001, 0x8, {{0xa, 0x4, 0x3, 0x9, 0x28, 0x68, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xa}, {[@rr={0x7, 0x7, 0x11, [@broadcast]}, @timestamp={0x44, 0xc, 0xb4, 0x0, 0xe, [0x7, 0x0]}]}}}}}) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:04 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) keyctl$get_persistent(0x16, r5, r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:04 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) fsmount(r2, 0x1, 0x12) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:04 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:04 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:24:05 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:05 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:05 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) r2 = fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) fsmount(r2, 0x1, 0x12) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:05 executing program 4: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000008c0), &(0x7f0000000900)=0x4) 06:24:05 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000440)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) 06:24:14 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x1a}}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8}]}, 0x58}}, 0x8016) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:14 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) fspick(r0, &(0x7f0000000140)='./file0\x00', 0x1) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:14 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:14 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:24:14 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:24:14 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:14 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:14 executing program 4: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, &(0x7f0000000900)) 06:24:14 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:14 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:14 executing program 4: getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) 06:24:14 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) clock_gettime(0x5, &(0x7f0000000100)) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:23 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r5 = fsmount(r4, 0x0, 0x7d) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r5, 0x54a3) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:24:23 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) timerfd_create(0x6, 0x80000) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:23 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = getpgrp(0xffffffffffffffff) r3 = getpgrp(0xffffffffffffffff) r4 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x11c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r0}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x84055}, 0x4880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:23 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:24:23 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) r4 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:23 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:23 executing program 4: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:23 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) bind$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x2b, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xee0, 0x2}, 0xe) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:23 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getpgrp(0xffffffffffffffff) getpgrp(0xffffffffffffffff) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:23 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:23 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = fsmount(r0, 0x1, 0x89) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r6, 0x40082102, &(0x7f0000000340)=r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:24 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) r1 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000080)='$!&\'\x00', &(0x7f00000000c0)='./file0\x00', r0) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:24 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getpgrp(0xffffffffffffffff) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 169.588478] [ 169.588799] ===================================== [ 169.589519] WARNING: bad unlock balance detected! [ 169.590234] 6.19.0-rc5-next-20260114 #1 Not tainted [ 169.590960] ------------------------------------- [ 169.591658] syz-executor.5/282 is trying to release lock (rcu_read_lock) at: [ 169.592704] [] __wait_on_freeing_inode+0x105/0x350 [ 169.594252] but there are no more locks to release! [ 169.596613] [ 169.596613] other info that might help us debug this: [ 169.600036] 4 locks held by syz-executor.5/282: [ 169.602560] #0: ffff88800f9d03f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 169.603873] #1: ffff88801ada2078 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 169.605347] #2: ffff88800f9d4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 169.606690] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 169.608057] [ 169.608057] stack backtrace: [ 169.608742] CPU: 0 UID: 0 PID: 282 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 169.608770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 169.608783] Call Trace: [ 169.608792] [ 169.608802] dump_stack_lvl+0xca/0x120 [ 169.608848] ? __wait_on_freeing_inode+0x105/0x350 [ 169.608876] print_unlock_imbalance_bug+0x118/0x130 [ 169.608904] ? __wait_on_freeing_inode+0x105/0x350 [ 169.608932] lock_release+0x1ee/0x270 [ 169.608962] __wait_on_freeing_inode+0x10a/0x350 [ 169.608991] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 169.609022] ? __pfx_var_wake_function+0x10/0x10 [ 169.609055] ? lock_is_held_type+0x9e/0x120 [ 169.609092] insert_inode_locked+0x25f/0x890 [ 169.609125] __ext4_new_inode+0x223d/0x4cd0 [ 169.609158] ? __pfx___ext4_new_inode+0x10/0x10 [ 169.609185] ? __pfx_avc_has_perm+0x10/0x10 [ 169.609211] ? __pfx___dquot_initialize+0x10/0x10 [ 169.609250] ext4_mkdir+0x331/0xb30 [ 169.609285] ? __pfx_ext4_mkdir+0x10/0x10 [ 169.609316] ? security_inode_permission+0x72/0xe0 [ 169.609341] vfs_mkdir+0x6d8/0xc00 [ 169.609374] do_mkdirat+0x11a/0x440 [ 169.609399] ? __pfx_do_mkdirat+0x10/0x10 [ 169.609423] ? do_getname+0x107/0x3d0 [ 169.609450] ? do_getname+0x142/0x3d0 [ 169.609479] __x64_sys_mkdir+0x65/0x80 [ 169.609504] do_syscall_64+0xbf/0x420 [ 169.609528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.609552] RIP: 0033:0x7fe4def58c27 [ 169.609571] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.609592] RSP: 002b:00007ffcffa9cef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 169.609613] RAX: ffffffffffffffda RBX: 00007ffcffa9cf80 RCX: 00007fe4def58c27 [ 169.609628] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffcffa9cf80 [ 169.609642] RBP: 00007ffcffa9cf5c R08: 0000000000000000 R09: 0000000000000004 [ 169.609655] R10: 00007ffcffa9cc96 R11: 0000000000000202 R12: 0000000000000032 [ 169.609669] R13: 0000000000029534 R14: 0000000000000008 R15: 00007ffcffa9cfc0 [ 169.609689] [ 169.642183] ------------[ cut here ]------------ [ 169.642948] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.5/282 [ 169.646254] Modules linked in: [ 169.646861] CPU: 0 UID: 0 PID: 282 Comm: syz-executor.5 Not tainted 6.19.0-rc5-next-20260114 #1 PREEMPT(lazy) [ 169.648550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 169.650041] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 169.651076] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 16 c0 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 24 74 03 e8 bc 5c 56 00 e9 [ 169.654085] RSP: 0018:ffff88801915f9e0 EFLAGS: 00010286 [ 169.654950] RAX: 00000000ffffffff RBX: ffff88801b1b9b80 RCX: ffffffff81565a27 [ 169.656278] RDX: 0000000000000000 RSI: ffffffff81565a30 RDI: ffff88801b1b9f7c [ 169.657513] RBP: ffff88801b1b9b80 R08: 0000000000000000 R09: fffffbfff0ba6ffc [ 169.658758] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b1b9b80 [ 169.660054] R13: 0000000000000001 R14: ffffffff85c0dba0 R15: ffff888026903c48 [ 169.661286] FS: 0000555580e43400(0000) GS:ffff8880e5343000(0000) knlGS:0000000000000000 [ 169.662676] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 169.663705] CR2: 00007ff1eea044a1 CR3: 000000001eeca000 CR4: 0000000000350ef0 [ 169.664936] Call Trace: [ 169.665506] [ 169.666882] __wait_on_freeing_inode+0x10f/0x350 [ 169.668405] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 169.670646] ? __pfx_var_wake_function+0x10/0x10 [ 169.673403] ? lock_is_held_type+0x9e/0x120 [ 169.675710] insert_inode_locked+0x25f/0x890 [ 169.679160] __ext4_new_inode+0x223d/0x4cd0 [ 169.684281] ? __pfx___ext4_new_inode+0x10/0x10 [ 169.686239] ? __pfx_avc_has_perm+0x10/0x10 [ 169.687508] ? __pfx___dquot_initialize+0x10/0x10 [ 169.692161] ext4_mkdir+0x331/0xb30 [ 169.696205] ? __pfx_ext4_mkdir+0x10/0x10 [ 169.697462] ? security_inode_permission+0x72/0xe0 [ 169.700813] vfs_mkdir+0x6d8/0xc00 [ 169.703775] do_mkdirat+0x11a/0x440 [ 169.705832] ? __pfx_do_mkdirat+0x10/0x10 [ 169.707344] ? do_getname+0x107/0x3d0 [ 169.708909] ? do_getname+0x142/0x3d0 [ 169.711754] __x64_sys_mkdir+0x65/0x80 [ 169.713101] do_syscall_64+0xbf/0x420 [ 169.716386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.718743] RIP: 0033:0x7fe4def58c27 [ 169.719572] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 169.722633] RSP: 002b:00007ffcffa9cef8 EFLAGS: 00000202 ORIG_RAX: 0000000000000053 [ 169.723945] RAX: ffffffffffffffda RBX: 00007ffcffa9cf80 RCX: 00007fe4def58c27 [ 169.725259] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffcffa9cf80 [ 169.726510] RBP: 00007ffcffa9cf5c R08: 0000000000000000 R09: 0000000000000004 [ 169.727733] R10: 00007ffcffa9cc96 R11: 0000000000000202 R12: 0000000000000032 [ 169.729035] R13: 0000000000029534 R14: 0000000000000008 R15: 00007ffcffa9cfc0 [ 169.734560] [ 169.734944] irq event stamp: 235767 [ 169.735622] hardirqs last enabled at (235767): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 169.737383] hardirqs last disabled at (235766): [] _raw_spin_lock_irqsave+0x53/0x60 [ 169.739089] softirqs last enabled at (235762): [] kernel_fpu_end+0x59/0x70 [ 169.740681] softirqs last disabled at (235760): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 169.742397] ---[ end trace 0000000000000000 ]--- 06:24:24 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) fsmount(r0, 0x1, 0x89) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:24 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:24:24 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:24 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) fsmount(r4, 0x0, 0x7d) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:24:24 executing program 4: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:24 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getpgrp(0xffffffffffffffff) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:32 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) fsmount(r4, 0x0, 0x7d) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:24:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000300)={r4, 0x2, r5, 0x800, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r6, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:32 executing program 4: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:32 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:32 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x4, 0x0, 0x1, 0x3, 0x0, "5eaed143dd22d9080f662aeb1f36ac71c1f0baf181056cd7f4bcc19a3ec3dcd390e7e18512e8abd0956d0228a1dd7c38c92c721cda5cc77f6481c645a2b0d55e", "6ff0cf6146615469f76b55ff9fc9d361bc4b616432f1d6c029d018a77ee9a9dfd5b41192711ec4b9f0e58122e2fe83b348fd0ebe598bdcef2ac24e1d2d59ff4b", "0f159fdd86152deef3c81076b81df932c8269f4cdbd8284d94586dcb8589e762", [0x400]}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:24:32 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getpgrp(0xffffffffffffffff) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:32 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:32 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:32 executing program 0: r0 = fsmount(0xffffffffffffffff, 0x0, 0x8) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x805) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x2) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) getpgrp(0xffffffffffffffff) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz0\x00', 0x200002, 0x0) 06:24:32 executing program 7: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$link(0x8, r0, 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000080)='ceph\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x40, 0x1, 0x3, 0x1, {{0x1d, 0x4, 0x2, 0x3a, 0x74, 0x66, 0x0, 0x3, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x8, 0xea, 0x0, 0x5, [0x9]}, @timestamp_prespec={0x44, 0x2c, 0x5e, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe5}, {@loopback, 0x56}, {@loopback, 0xfff}, {@broadcast, 0x6}, {@multicast2, 0xffffffc0}]}, @lsrr={0x83, 0x17, 0xe8, [@multicast2, @multicast2, @rand_addr=0x64010100, @loopback, @empty]}, @end, @generic={0x44, 0xe, "ff76e217aa0d5471a756dab8"}, @ra={0x94, 0x4}]}}}}}) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4669bb8dc6f8350e}, 0x40) keyctl$clear(0x7, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000d00), 0x4200, 0x0) 06:24:32 executing program 5: timerfd_create(0x3, 0x80800) timerfd_create(0x2, 0x80800) r0 = fsmount(0xffffffffffffffff, 0x0, 0x3) timerfd_gettime(r0, &(0x7f0000000000)) mq_notify(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x7, 0x0, @thr={&(0x7f0000000400)="1149d3dc1a7f641fa1c38b595f1ad201bca2dafbc13e8b562202233edb610354d5f067aa7a62f87d106aad3250b494a66fd88113bae1", &(0x7f0000000440)="9cb8aaf68f9ae2699a437bb992ea5157d5f6a2200843f809762632a6e1c579c533908432a9c478743a4aa73a83e0a80a13f64a297ff6adcbde6721"}}) 06:24:32 executing program 3: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x23, 0x1, 0x4, &(0x7f0000003340)) 06:24:32 executing program 6: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x1b5, 0x80000) ioctl$RTC_VL_CLR(r0, 0x7014) sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r1 = syz_open_dev$rtc(&(0x7f0000000140), 0xd31, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1eb) ioctl$RTC_VL_CLR(r1, 0x7014) openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x48044, 0x0) ioctl$RTC_WIE_OFF(r2, 0x7010) r3 = socket$inet6(0xa, 0x80000, 0xffffffff) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x2, r3, 0x4}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x80000001, 0x6, {{0x1a, 0x4, 0x2, 0xc, 0x68, 0x67, 0x0, 0x51, 0x29, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x3c, 0xf3, 0x1, 0x3, [{@empty, 0x3f}, {@broadcast, 0x5}, {@rand_addr=0x64010100, 0x5}, {@multicast1, 0x5}, {@remote, 0x81}, {@multicast2}, {@empty, 0x7}]}, @ssrr={0x89, 0xf, 0x86, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101]}, @generic={0x83, 0x2}, @ra={0x94, 0x4}, @noop]}}}}}) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) 06:24:32 executing program 2: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedsend(r0, &(0x7f0000000040)="f90643f3d07607546757c4ce190cfe2229d575e4208751a0a41d98aa4a9e789fda4496bac2801dd81bbf06a4fe4c31322f4335588342a04b5ada505ca097733b34f33602891a89f726eb4e8ffae6762fa5987e60676a20", 0x57, 0x5, &(0x7f0000000100)={r1, r2+10000000}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x111400, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) mq_timedsend(r0, &(0x7f0000000180)="7c7c0b179f1ceea57da0c43f4755a85bcc9313c000b7432b0f99020db44b25e780c8d8343eaf1e4faaae90dfa16d9adc11bce3f82b281463b69fd860656e45c8647425ec57a9d6cd", 0x48, 0x7, &(0x7f0000000200)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x60, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}}, 0x20000000) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80440000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x489c0}, 0x20000000) 06:24:32 executing program 1: sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x4, 0x6, 0x2}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x4000) socketpair(0x5, 0x6, 0x4a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r2, 0x522, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24008000}, 0x48040) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4040}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10000}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) fsmount(r4, 0x0, 0x7d) syz_genetlink_get_family_id$tipc(&(0x7f0000000900), r4) 06:24:32 executing program 4: sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c090}, 0x40000) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40800) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2808000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x801, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xda}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x8000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0xee720b7c5ea2b8ed}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'ip6erspan0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48801) r1 = timerfd_create(0x9, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000540)='ib', 0x0, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000580), r2) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) socketpair(0x26, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x21, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c011}, 0x80) VM DIAGNOSIS: 06:24:24 Registers: info registers vcpu 0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82973905 RDI=ffffffff889c0960 RBP=ffffffff889c0920 RSP=ffff88801915f4e8 R8 =0000000000000000 R9 =ffffed100163c046 R10=0000000000000020 R11=6e6920726568746f R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c0920 R15=ffffffff829738f0 RIP=ffffffff8297395d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555580e43400 00000000 00000000 GS =0000 ffff8880e5343000 00000000 00000000 LDT=0000 fffffe3b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff1eea044a1 CR3=000000001eeca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00007f252fb517c800007f252fb517c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffffff85c16884 RBX=0000000000000001 RCX=ffffffff84d172ee RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff8880190a7938 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003214f2b R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff8880190a7988 RIP=ffffffff81b3c1ca RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557dd6f400 00000000 00000000 GS =0000 ffff8880e5443000 00000000 00000000 LDT=0000 fffffe4400000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f81d1aa7542 CR3=000000001dafe000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000