Warning: Permanently added '[localhost]:23264' (ECDSA) to the list of known hosts. 2026/01/18 21:05:34 fuzzer started 2026/01/18 21:05:35 dialing manager at localhost:42157 syzkaller login: [ 51.826802] cgroup: Unknown subsys name 'net' [ 51.894197] cgroup: Unknown subsys name 'cpuset' [ 51.908065] cgroup: Unknown subsys name 'rlimit' 2026/01/18 21:05:47 syscalls: 210 2026/01/18 21:05:47 code coverage: enabled 2026/01/18 21:05:47 comparison tracing: enabled 2026/01/18 21:05:47 extra coverage: enabled 2026/01/18 21:05:47 setuid sandbox: enabled 2026/01/18 21:05:47 namespace sandbox: enabled 2026/01/18 21:05:47 Android sandbox: enabled 2026/01/18 21:05:47 fault injection: enabled 2026/01/18 21:05:47 leak checking: enabled 2026/01/18 21:05:47 net packet injection: enabled 2026/01/18 21:05:47 net device setup: enabled 2026/01/18 21:05:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/18 21:05:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/18 21:05:47 USB emulation: enabled 2026/01/18 21:05:47 hci packet injection: enabled 2026/01/18 21:05:47 wifi device emulation: enabled 2026/01/18 21:05:47 802.15.4 emulation: enabled 2026/01/18 21:05:47 fetching corpus: 0, signal 0/0 (executing program) 2026/01/18 21:05:48 starting 8 fuzzer processes 21:05:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x10100, 0x0) bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x3, 0x3}, 0x6) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) 21:05:48 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000800)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0x84, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x59f5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc4}, 0x240040c1) 21:05:48 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r8 = accept4(r5, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r8, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000001f40)=0x1) 21:05:48 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r12 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r12, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r13 = accept4(r8, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r13, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) getpeername(r7, &(0x7f0000005a80)=@caif=@rfm, &(0x7f0000005b00)=0x80) r14 = inotify_add_watch(r3, &(0x7f0000005b40)='./file0\x00', 0x100) inotify_rm_watch(r9, r14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:05:48 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r7 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r8, r9+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) ioctl$HIDIOCGRAWINFO(r11, 0x80084803, &(0x7f0000006100)=""/198) getsockname(0xffffffffffffffff, &(0x7f0000006200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000006280)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000006340)={0x0, 0x0, "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", "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"}) 21:05:48 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x30}, {0x36}, {0x60, 0x1}, {0x68, 0x1}, {0x30, 0x1}, {0x2e}, {0x1a, 0x1}, {0x2}, {0x60, 0x1}, {0xb42b2d84a14561b1}, {0x1b}, {0x0, 0x1}, {0x39, 0x1}, {0x60, 0x1}, {0x60, 0x1}, {0x5}, {0x9, 0x1}, {0x24}, {0x12, 0x1}, {0x8, 0x1}, {0x5}, {0x32, 0x1}, {0x48, 0x1}, {0x30, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3a}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3f4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) [ 63.587003] audit: type=1400 audit(1768770348.545:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 21:05:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x49c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004043}, 0x20008053) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000980)={0x9, 0x831f, 0x20, 0x4, 0x1a, "56855dde9345b745"}) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:05:48 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r9) syz_open_dev$vcsn(&(0x7f00000008c0), 0x58, 0x48000) [ 64.768864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.772510] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.775751] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.784780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.788745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.901847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.904490] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.906072] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.914478] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.921592] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.959966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.961409] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.967388] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.968738] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.976868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.983016] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.987735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.989116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.990400] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.991691] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.993215] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.994934] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.998757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.999929] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.004338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.010554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.011707] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.014670] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.015800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.017001] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.021986] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.024955] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.026393] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.028134] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.029147] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.029281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.036178] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.037919] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.041696] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.045695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 66.863959] Bluetooth: hci0: command tx timeout [ 66.992175] Bluetooth: hci1: command tx timeout [ 67.055503] Bluetooth: hci7: command tx timeout [ 67.120403] Bluetooth: hci5: command tx timeout [ 67.120505] Bluetooth: hci4: command tx timeout [ 67.120800] Bluetooth: hci3: command tx timeout [ 67.120855] Bluetooth: hci6: command tx timeout [ 67.120907] Bluetooth: hci2: command tx timeout [ 68.911494] Bluetooth: hci0: command tx timeout [ 69.040455] Bluetooth: hci1: command tx timeout [ 69.103606] Bluetooth: hci7: command tx timeout [ 69.167633] Bluetooth: hci5: command tx timeout [ 69.168556] Bluetooth: hci2: command tx timeout [ 69.168975] Bluetooth: hci6: command tx timeout [ 69.169366] Bluetooth: hci3: command tx timeout [ 69.169919] Bluetooth: hci4: command tx timeout [ 70.960571] Bluetooth: hci0: command tx timeout [ 71.087459] Bluetooth: hci1: command tx timeout [ 71.152491] Bluetooth: hci7: command tx timeout [ 71.215481] Bluetooth: hci3: command tx timeout [ 71.215880] Bluetooth: hci4: command tx timeout [ 71.216263] Bluetooth: hci5: command tx timeout [ 71.216865] Bluetooth: hci6: command tx timeout [ 71.216873] Bluetooth: hci2: command tx timeout [ 73.007623] Bluetooth: hci0: command tx timeout [ 73.135506] Bluetooth: hci1: command tx timeout [ 73.199508] Bluetooth: hci7: command tx timeout [ 73.263507] Bluetooth: hci5: command tx timeout [ 73.264220] Bluetooth: hci2: command tx timeout [ 73.265106] Bluetooth: hci4: command tx timeout [ 73.265460] Bluetooth: hci3: command tx timeout [ 73.266207] Bluetooth: hci6: command tx timeout [ 98.466251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.466935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.030328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.030987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.205773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.206404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.325865] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.326517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.458346] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.458976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.604504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.606855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.770116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.771195] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.781980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.783139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.787307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.787945] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.940438] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.007041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.008162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:27 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r8 = accept4(r5, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r8, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000001f40)=0x1) [ 102.061170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.061211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:27 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r8 = accept4(r5, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r8, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000001f40)=0x1) [ 102.280898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.281870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.431992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.432956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:27 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r7, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r8 = accept4(r5, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r8, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000001f40)=0x1) 21:06:27 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x30}, {0x36}, {0x60, 0x1}, {0x68, 0x1}, {0x30, 0x1}, {0x2e}, {0x1a, 0x1}, {0x2}, {0x60, 0x1}, {0xb42b2d84a14561b1}, {0x1b}, {0x0, 0x1}, {0x39, 0x1}, {0x60, 0x1}, {0x60, 0x1}, {0x5}, {0x9, 0x1}, {0x24}, {0x12, 0x1}, {0x8, 0x1}, {0x5}, {0x32, 0x1}, {0x48, 0x1}, {0x30, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3a}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3f4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) 21:06:27 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000800)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0x84, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x59f5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc4}, 0x240040c1) [ 102.657899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.657922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:27 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r7 = accept4(r4, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r7, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x20, 0x3fa, 0x800, 0x70bd2b, 0x25dfdbfb, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 21:06:27 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x30}, {0x36}, {0x60, 0x1}, {0x68, 0x1}, {0x30, 0x1}, {0x2e}, {0x1a, 0x1}, {0x2}, {0x60, 0x1}, {0xb42b2d84a14561b1}, {0x1b}, {0x0, 0x1}, {0x39, 0x1}, {0x60, 0x1}, {0x60, 0x1}, {0x5}, {0x9, 0x1}, {0x24}, {0x12, 0x1}, {0x8, 0x1}, {0x5}, {0x32, 0x1}, {0x48, 0x1}, {0x30, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3a}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3f4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) [ 102.814488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.815207] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:27 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r7 = accept4(r4, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r7, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000001dc0), &(0x7f0000001e00)=0x4) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) [ 102.946250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.950304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:06:39 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r7 = accept4(r4, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r7, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001d80)={'batadv_slave_0\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:39 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000800)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0x84, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x59f5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc4}, 0x240040c1) 21:06:39 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r12 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r12, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r13 = accept4(r8, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r13, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) getpeername(r7, &(0x7f0000005a80)=@caif=@rfm, &(0x7f0000005b00)=0x80) r14 = inotify_add_watch(r3, &(0x7f0000005b40)='./file0\x00', 0x100) inotify_rm_watch(r9, r14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x10100, 0x0) bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x3, 0x3}, 0x6) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) 21:06:39 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r9) syz_open_dev$vcsn(&(0x7f00000008c0), 0x58, 0x48000) 21:06:39 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f00000014c0)={0x68, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x48}}}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x1f, 0x13, [{0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x30}, {0x36}, {0x60, 0x1}, {0x68, 0x1}, {0x30, 0x1}, {0x2e}, {0x1a, 0x1}, {0x2}, {0x60, 0x1}, {0xb42b2d84a14561b1}, {0x1b}, {0x0, 0x1}, {0x39, 0x1}, {0x60, 0x1}, {0x60, 0x1}, {0x5}, {0x9, 0x1}, {0x24}, {0x12, 0x1}, {0x8, 0x1}, {0x5}, {0x32, 0x1}, {0x48, 0x1}, {0x30, 0x1}]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3a}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x3f4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) 21:06:39 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x49c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004043}, 0x20008053) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000980)={0x9, 0x831f, 0x20, 0x4, 0x1a, "56855dde9345b745"}) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:06:39 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r7 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r8, r9+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) ioctl$HIDIOCGRAWINFO(r11, 0x80084803, &(0x7f0000006100)=""/198) getsockname(0xffffffffffffffff, &(0x7f0000006200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000006280)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000006340)={0x0, 0x0, "a666afe1e22de99053b84f1b373219bf6b984720d975a0b62e7813793f0626ae450962e8af2068e9b33b95d984dc9af18c83a4edcae8941897c1cdeb4e52b44160d517186d4928c62fd283d55a5b6e7eb696d6032f96ac5e01bb1e17cad96b0e118ce0dc5851f9ff04c4673c1e7a70230fbe546853f9c98561c26d153f59780eb1066e8ddb67e93ab11b930af60829b58c189afb6f2a0088a1ba016482c4385236f27f7568b50c56aec98218d6e7569927cb770d152fa3c20cc3405969ce938136406fe2b350c1d13a033e22afa465df022bef9f844489d2caab2191cc4cc28a47b974aee2d0bb97eb16e13ef9fcbfd72bfb57b52ab6a586233176b795628794", "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"}) 21:06:39 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x10100, 0x0) bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x3, 0x3}, 0x6) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) 21:06:39 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r7 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r8, r9+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) ioctl$HIDIOCGRAWINFO(r11, 0x80084803, &(0x7f0000006100)=""/198) getsockname(0xffffffffffffffff, &(0x7f0000006200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000006280)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000006340)={0x0, 0x0, "a666afe1e22de99053b84f1b373219bf6b984720d975a0b62e7813793f0626ae450962e8af2068e9b33b95d984dc9af18c83a4edcae8941897c1cdeb4e52b44160d517186d4928c62fd283d55a5b6e7eb696d6032f96ac5e01bb1e17cad96b0e118ce0dc5851f9ff04c4673c1e7a70230fbe546853f9c98561c26d153f59780eb1066e8ddb67e93ab11b930af60829b58c189afb6f2a0088a1ba016482c4385236f27f7568b50c56aec98218d6e7569927cb770d152fa3c20cc3405969ce938136406fe2b350c1d13a033e22afa465df022bef9f844489d2caab2191cc4cc28a47b974aee2d0bb97eb16e13ef9fcbfd72bfb57b52ab6a586233176b795628794", "e4cf1d85fe69e32b54ce6e715906eae558e18941e37bf8585b69c3feb1b0a79208fd9fcdd9c38ff8f1501c9fe7877b7e9152557ae17056e36269319e77ddb8d1ecdd1068d92b90e72e89aa09a9f0fd370580d834033870953cd030abcebf3cf9d7c9a9d5f97a50576dc4905f4718d81071a3399e7ae4b6ff1e96f77580602f21997be9c7fe889d9739274afdc83523862e80adb598ea05113ab5978ee564f3de26155438685fbc5d811f19574b48460fd50aacc611168b09b5c177bcefd7ab8e008f3ebe7cd42c214b18989538d6d93614ecf684799572278b97fdcf7e3460651e7ca4a7e0f603fd2246f74f20d1bf64af84677a906040c4cfef28fb98319ee73808ca7dff44bbd9a07d008476a3b5e947480a0814e2aaaa854d96fa19e3a23c2b1fd427e003dbe2254affae93c3b75c99a26834d3dc137e72fa33f02fbdb078c7e2d172273178b4e77dc01a5f833b8956d46476dada1f4fdcd37c78af0fa0de1a33696888bb888ccd6fe9f01767065dd24c696004718dc99773ea3fa5507bc1c0920c2251b57a9083fb31e80103041deb810f025ec05588e68bdb8b5d9e4c3bf377a974e46b6eda6b962316457b3bf70ebdc1b239247ed3275b8b2869d72822672704accbd57dc82830329accae2c14e2fa58c4203f414160a490a7463e4566117cd5303694287c1d93c1b35b97cf5cd4487c2d499af7687fe67e4986135134cd6491be295ae3599ab746c12363a9abfc67ac8d89c28515436f1081bab613989c980adb421720cd5929b375fc44d242c16fa9a7f18c256dae710c89f64c38663f695dff1fe9be52776eba0a1c2a1465a37e87579558a7304a4a0454a7cea41f58735962e0be06741e4b45d57f9af5f8c0a4744ce38114e3f6916d9ba1bff90e5a72194323936a7f1ab313d2c720ce0c13150dee92a898dcf9b599a8c6bad5f1fbfbeae92defa884129094847c5bd651bbcbacacad5501aaab9b41f1d6817513c0b892ba2c897ceb98b8bad24142e89ac5a1c57e9181d59c5e1fa5b2fafccfc68fcbc1574cbdd67a68aba159dc6ac573e7bf316e1b3ba56232b522a6184e75f5712880e58d05f77988993eca91cc23263f7a2ba2d5b564981a12743699cff1aa3b3a262961b6e3d12edc04495893ec2884921c8370b43eab6457f931aa5caaf1be6516899df58a48b3a5c12d5bb6b1e7eaa7e4ee605fae8e419f6a523cba114c6e6dfb869c513248ad4ace7af85cb7ec68627b6e458a688bc2b4455fb821d7201894cb5550bf63392ef53f005e581b93b1c3a7ed1f3711dc7a4ea4428f789896efe488341f0b5c8059b9d0f92b01432bc65f71c5c44c3e84588e0844941d39f0852533356836e1ce19958b5959dcde48602a18962cb953135f83f85f23bc03a82cd1c317330b1158979008a7b5ff19bb489fcd2017a246bc064437fff828a6b8eb903416da8a1611f955cb6722534684b332daba090bd91fd414c2a7a2baee8a4e4326f778537d8cc84dad40e4c6e3d4a493fe4668a2f74475be834b889dfafea45ac3531898315c3f260b54c879b87e393b936024945d0a2e32ef4741adea7f4c7b650d4944b8494587618db5e6660db41bfa8549226775b7becb88310bf55384723ebd856557c1b5752a41a38b64988fc23bbde1762c11ab3b7f354d96bf5afc0ec3c7d6de89884a3459c06da4dd3b15763c1e8dc73ca6ca5e0d78c7cf219c9e1fc25283cac15dcf9d6487df8a16f995f97217b67c1ad75f87302c1853eb39bb7a6d3b2a96396ec77356c07ff2c916be39c056bfcce70b0e3138ce618bf115b63288fb10bf26584c9bc9b45ace7a6283983de16bdb35c1ad3b47a2e99766073c46ed064385f772d88ee703e98a55b42b13c1b7784defdbab6effa83cb48c73a066eb4b043f1d60f017185fb64d11e2bdd6c8df8fbefb641161cc23a33e6e2aa7ba2020651b0de5a36dfc811364d32af9781e3ac2addcd35bb9befb5ca790a148db445b3b2df39551bc07241b1d3379e6a1f5af72c411bc19aea6d49e4e7c23fea64cd9b26bbee0b76c69dbebff7ea902e0fd2327856cca28b586957b7ef04ca810fdd870bf0feaf198d906d57fbb89ff1a8d07dceb55831114fc1da9b7ab2e8e604ec2d61ab648cd9f878e8534e69dfd62678d723b73b3bc6bb6e5381889b8fb476edf621c4c41c4df2a64d0a5b6b77528f74c484e447ee755df5dd194bfff87b7cea5174da94f563894a07ec8e0c63154dd1ac0969957f5d1ee0ac0ed338286ef2bf5c28aa6876cb416b5a7566fd4126e8702ed4afb24a4281610885c05fd73f1eca269a6cff5b9ddc8ef76e9c2225c81742a2c3f3be2fa65149e3c02ef226d206f968d3f39a52009faa2c1407b35354721adfe32726954d4078fc1161bd8d4a9f40e47a42050e224036f4d57ccb65e9206706d1076ed12a6b3aa88d67eca2567ee4667dfceb15289423c7be28ca567a39546fbd734c6a8bc200a11cad33ffb3dd8136d33ad0bf83c55a0a80d503bf1ca1d3039022c61844dd5d525448fe2abc02a3e6bfbc4bde8152c238916539e2f3865fba69ec317a0d257f233f14255d7387a7a1609ac131c4bdcbfe8e78d54f9f9ce8422312509d68765adf36a019c409f8f07b0fa0560ca4b916efd8903f1bc4645ebc1aa96b4b8a4827740986c25079b6997c213a347bf6ddc71df03be8996b0d3587e9e687c31007fb287ddf0fe684a88b8b023b11470e169fe2991b61a352fd7e8e37d1be51420b136564eb31b9c209226ec1c9262806d34bddcd3f8d9ae9c8883cc430831b2af47a6adbc8173707fb36c8c7bf6195a0f28c70f5c01774244a1b0f344b32a6b10849fe30c84d581acfed074ee6d8682b0e03c284544b9e0f1ec4ad77ff0c6ba9f10f3ee24314ee13da3d09cf8e3e3cded28c0d4a4ee91c3a8e351c3d8c6ec726faba8a27a62fcae2d11d5bab588b4af79d82c72ef7a416f654057666c8dbe271868867693161cb548bca59ed87af3a95e16ebe1d907ffffa72c024224aec1cc8031ca868642ff382a25a7080eec5a94e308521df750e14effe7b1e606928a9c9fcbad059e0245406456eaa628edbfb5c5a1fe7a67a322534564494f497ba7e55feb29eb5c133c0a61249a73890487992ad6598dc522c68924237f70e840378a977dbc1ae2d06bcb9b3ff22a9b39c20e7b9ebe9070dedef5e5a9dfacc75df07f6fae64cafe7e6e97b2da2ff02cead43365b346df5e41ba1ca359fd03e657c25b8a40a252441e1863d5ff34eff7d0d3ebbd0e5e4abbdb8fe1e8ae11e012e5f58a8197b197526e14f8b1ef4b3192891976b5ab278a2f20c9a044740cadef7b3171d084eaf7452f757f4778ad8b137886fa7db91194c6ce07e6d278f5a7cb39fe417e333b3070bcb3bf29e698fe06e196d7f8a4bbe0da2472379e25cc46cb258c2decd53c445f4d2719c97afebb9319aed6795eb39593f3fb3f0fe8781ccb31c4461b7394697c03e4c1e24c154354aa45f377cde9b3ef4dcf83504ce644093ebc2c1ca217f1f9eb2a61f3bbe693133000a467085dbfd96b661c9ef3bd9192186ac38e2d259b806f47287d9d59035edcced1e86dd7f58119b49e6f9abeac0b11fef5e49c0a94937adddaafc946199649d72f8f481d764b1dcdb4ec58cb78f82882823263bc1bcc2f4b0f94553a8cd72c4005b249a60d98cab1599a62e28fe4bcf52afa558e330f04a1759f14e8fa1a75fee1520cac303bff0f666c92502d7bd932250b71a736c515b0458aa314ed8bae07eb693f07e01f01805ca37aaa70c5f3540683a1463642d7d39f4873e081ce80d4060519482bbea1bd8c5920e06b485141c73fffd447acb0a843fbb4875196bfdb225c06546e717b028ceee58f39f11676c62441536ff5ee86f9a8f855f43164d39f356fc00e41db3a2949a4a2ec269ecd9f6f140efcc21eabcb728999e67e51cd30648ca78d3fa3c28c8dc7eda37e05c22dbd11593308bd2315c3090e48b093ab29cb3d29d0b7590401fe2f392f5acdd36fad4c62ff46b6e968f4de8266b1ba37fd21f1f32dfaaa2431b8730102eac7abafb31613a48b07626433c9520f7ab9f05ade4135ed75c92144cf9c18ce52ddd18822f55ff14e5362e465a08247fd4ec4ef3469bb631155f699f39b8426d3803989831bd6594e34f9324beeab3cfadf690ab1aa2b75560b7717135421d0fd00f1a58af0108d5b3420050407abf3e3ce4bbe8050939b15b4977bbcf05c528a940059559837c52b253a2b7286e4961b88ed6f6adf222e946726241f743e2019bd91bf7571b31f5c69f403a347603606d47446fd23aaa2efbe5ebbb3eba565174397e8a3f9f523912365a5d9a30a414dc4f839fba6c54881d8417362a94e17866dbfc7cbe22f23bce2baf7bde4c24d5f5a713a770a0c3b6badd2875bb26f157e1c7dc52a478c749c41d3a2ce127660deb899941d8a0c94be40a6d1fef2765d2078aed5f7e8d5c86853a4d10d16b5ae172a0c60d03f6baa0e1b084f3d31197b707fd1f752f18488925c648aee2d285b531386ebd229286f24008d94942e7e90f9ef0a645f40de3b7af881162cfb4f3b45fbe244b237204b8c6a9a8c98543426cd15f3562f288659b0c6f9211ed1dee70192806a985d7856c6ab81dea61cf7a989708e7010b115640568076e9800f60da1eec497d8bd9d71c119f54e2384b3a887479cb446d26a57539802596f3b3c3b25f365f4eef868669e93af538a69ddfb57c48a1d7b4f16bb3707d1e96bb79e7f7b5a0cf4368bf071fef60b039c60d1e8ec2cf9e14f8607ce5a17784510f598ee664c4ce252d2d5cc185ece6069bbb6f565a0e657a676bd1452e15669db0d3a27f1cca2791321b98d226c55a2004745107beb99b9ad323fb161f884fc2dc098cb35a77df2e8461e7e32b68e1cfef02f1223fec33902e6ceb4778664c15ee73df849e94ae8a5942e53049c3c50b245caa2191683043911286f9eef4f002d1a9c3174920528c0eb8b98aea65fedbda3f8b2683a1b03856fb7c78ac0decdcc5159f189f37a3f1b3b266c707d801ac3b9d0f30d93934f87e84bf8a5e11efa55ce789676d2061c04da6d800bea13be4acb8ec7d0254cbb8d26bd938bd9bf21da6f00f9844533f5fc9d7dab235d2cf15eaad8b83d0c198266eaab4ddaf3f9af4bfc96d7bd6173f704fa29f68db8d22c30b65bb031fe34efdb47f566ef7d04a80474fd04b95edae2fd6bbf3fec9355b8132924c194b0936d5b4244756fdd631387c295a46aed2611c4b96eaa5f3480dfaf9dd516e7b36da73a75babbc005595c2f74500ecbbc92e1c40e7b8cf41e5763b3d4455e71f7bf41d17b5d96a7a86d4a6668f3e1cc25775344a4bc378ba63e8d3147950cb1468a571945731df512304d1be6fe4bc6ee26ed2caedfdbc81855"}) 21:06:47 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000800)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c00)={&(0x7f0000002b40)={0x84, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x59f5}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8}]}, @NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0xc4}, 0x240040c1) 21:06:47 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r6, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r7 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r7, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r8, r9+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r12, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) ioctl$HIDIOCGRAWINFO(r11, 0x80084803, &(0x7f0000006100)=""/198) getsockname(0xffffffffffffffff, &(0x7f0000006200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000006280)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r5, 0xd000943e, &(0x7f0000006340)={0x0, 0x0, "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", "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"}) 21:06:47 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:06:47 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r9) syz_open_dev$vcsn(&(0x7f00000008c0), 0x58, 0x48000) 21:06:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x10100, 0x0) bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x3, 0x3}, 0x6) pipe(&(0x7f0000000800)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) 21:06:47 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x49c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004043}, 0x20008053) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000980)={0x9, 0x831f, 0x20, 0x4, 0x1a, "56855dde9345b745"}) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:06:47 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r12 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r12, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r13 = accept4(r8, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r13, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) getpeername(r7, &(0x7f0000005a80)=@caif=@rfm, &(0x7f0000005b00)=0x80) r14 = inotify_add_watch(r3, &(0x7f0000005b40)='./file0\x00', 0x100) inotify_rm_watch(r9, r14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:47 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) r7 = accept4(r4, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) write$bt_hci(r7, &(0x7f0000001d40)={0x1, @read_clock={{0x1407, 0x3}, {0xc8, 0x80}}}, 0x7) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r10}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) r12 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r12, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r13 = accept4(r8, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r13, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) getpeername(r7, &(0x7f0000005a80)=@caif=@rfm, &(0x7f0000005b00)=0x80) r14 = inotify_add_watch(r3, &(0x7f0000005b40)='./file0\x00', 0x100) inotify_rm_watch(r9, r14) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:56 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r6 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r7, r8+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) ioctl$HIDIOCGRAWINFO(r10, 0x80084803, &(0x7f0000006100)=""/198) getsockname(0xffffffffffffffff, &(0x7f0000006200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000006280)=0x80) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:06:56 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r9) syz_open_dev$vcsn(&(0x7f00000008c0), 0x58, 0x48000) 21:06:56 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:06:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x49c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004043}, 0x20008053) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000980)={0x9, 0x831f, 0x20, 0x4, 0x1a, "56855dde9345b745"}) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:06:56 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) accept4(r4, &(0x7f0000001c80)=@ieee802154={0x24, @long}, &(0x7f0000001d00)=0x80, 0x800) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:56 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, &(0x7f0000000800)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:06:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x10100, 0x0) bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x3, 0x3}, 0x6) pipe(&(0x7f0000000800)) 21:06:56 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r6 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r7, r8+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r11, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) ioctl$HIDIOCGRAWINFO(r10, 0x80084803, &(0x7f0000006100)=""/198) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:06:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000780), 0x10100, 0x0) pipe(&(0x7f0000000800)) 21:06:56 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x28, r6, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0x4000050) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r6}, {0x8, 0x1, r9}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) r11 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r11, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r12 = accept4(r8, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r12, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) getpeername(r7, &(0x7f0000005a80)=@caif=@rfm, &(0x7f0000005b00)=0x80) inotify_add_watch(r3, &(0x7f0000005b40)='./file0\x00', 0x100) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:56 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000007c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:06:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x44, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfa4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x49c}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004043}, 0x20008053) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:06:56 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r9) 21:06:56 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r8}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) r10 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r10, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r11 = accept4(r7, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) getpeername(r6, &(0x7f0000005a80)=@caif=@rfm, &(0x7f0000005b00)=0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:06:56 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000780)={0x40, 0x0, 0xfffffff9, 0x7}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:06:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:06:57 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:06:57 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b80), 0xffffffffffffffff) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:06:57 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r6 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r7, r8+60000000}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r10, &(0x7f00000060c0)={&(0x7f0000006000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000006080)={&(0x7f0000006040)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040080}, 0x2004c004) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:06:57 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:06:57 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) pipe(&(0x7f0000000800)) 21:06:57 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r9, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r10 = accept4(r6, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) sendmsg$AUDIT_USER_AVC(r10, &(0x7f0000005a40)={&(0x7f0000005900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005a00)={&(0x7f0000005940)={0xb8, 0x453, 0x1, 0x70bd2c, 0x25dfdbfc, "96c96794f8892aff0c98948c8a138c0ca41b62acc404cbba0d5d53a0e400bc6dbde813eeb37946a1976da9d3af8736d5ce34081778f8fe1659edce4603181ee98dcd3dd3c55fd354ad64417217f8f270fd629a2c68af2e28099d968ae2f7384746f4abb27f476b9e6ee6cdb50387d997691be56900fd881f158cfd46936f27cff87348feaa0e3cab9d67d0a964764448fab1d37af545e564d3ba45d441f167a05750f8a24b0b", ["", "", ""]}, 0xb8}, 0x1, 0x0, 0x0, 0xd8852d4fc46b9308}, 0x20008001) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:06:57 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3a85}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000001}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x4000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:06:57 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) r6 = syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)={0x0, 0x0}) recvmmsg$unix(r6, &(0x7f0000005d40)=[{{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000980)=""/56, 0x38}, {&(0x7f00000009c0)=""/123, 0x7b}, {&(0x7f0000000a40)=""/3, 0x3}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000000b80)=""/165, 0xa5}], 0x5, &(0x7f0000000cc0)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8}}, {{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000dc0)=""/96, 0x60}, {&(0x7f0000000e40)=""/41, 0x29}, {&(0x7f0000000e80)=""/78, 0x4e}, {&(0x7f0000000f00)=""/226, 0xe2}, {&(0x7f0000001000)=""/108, 0x6c}, {&(0x7f0000001080)=""/131, 0x83}, {&(0x7f0000001140)=""/50, 0x32}, {&(0x7f0000001180)=""/223, 0xdf}], 0x8, &(0x7f0000001300)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000013c0)=""/44, 0x2c}, {&(0x7f0000001400)=""/222, 0xde}], 0x2, &(0x7f0000001540)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000001640)=""/93, 0x5d}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/134, 0x86}, {&(0x7f0000002780)=""/157, 0x9d}, {&(0x7f0000002840)=""/113, 0x71}, {&(0x7f00000028c0)=""/15, 0xf}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/126, 0x7e}, {&(0x7f0000003980)=""/166, 0xa6}], 0x9, &(0x7f0000003b00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000003bc0), 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003c40)=""/13, 0xd}], 0x1, &(0x7f0000003cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000003dc0), 0x6e, &(0x7f00000044c0)=[{&(0x7f0000003e40)=""/173, 0xad}, {&(0x7f0000003f00)=""/236, 0xec}, {&(0x7f0000004000)=""/72, 0x48}, {&(0x7f0000004080)=""/128, 0x80}, {&(0x7f0000004100)=""/248, 0xf8}, {&(0x7f0000004200)=""/158, 0x9e}, {&(0x7f00000042c0)=""/244, 0xf4}, {&(0x7f00000043c0)=""/98, 0x62}, {&(0x7f0000004440)=""/107, 0x6b}], 0x9, &(0x7f0000004580)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{&(0x7f0000004640), 0x6e, &(0x7f0000004780)=[{&(0x7f00000046c0)=""/28, 0x1c}, {&(0x7f0000004700)=""/79, 0x4f}], 0x2}}, {{&(0x7f00000047c0)=@abs, 0x6e, &(0x7f00000049c0)=[{&(0x7f0000004840)=""/199, 0xc7}, {&(0x7f0000004940)=""/128, 0x80}], 0x2, &(0x7f0000004a00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000004a80)=""/149, 0x95}, {&(0x7f0000004b40)=""/4096, 0x1000}, {&(0x7f0000005b40)=""/204, 0xcc}], 0x3, &(0x7f0000005c80)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x9, 0x2002, &(0x7f0000005fc0)={r7, r8+60000000}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:05 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:07:05 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r9) 21:07:05 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:05 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) clock_gettime(0x0, &(0x7f0000005f80)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:05 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) pipe(&(0x7f0000000800)) 21:07:05 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:05 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r7}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) r9 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r9, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) accept4(r6, &(0x7f0000005840)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000058c0)=0x80, 0x800) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:14 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', 0x0, 0x20, 0x700, 0x200, 0x7f, {{0x29, 0x4, 0x2, 0x3d, 0xa4, 0x68, 0x0, 0x4a, 0x29, 0x0, @multicast1, @rand_addr=0x64010101, {[@ssrr={0x89, 0x1f, 0xd3, [@private=0x276d, @multicast1, @private=0xa010102, @rand_addr=0x64010102, @rand_addr=0x64010102, @local, @broadcast]}, @ssrr={0x89, 0x13, 0x41, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @broadcast, @private=0xa010101]}, @timestamp={0x44, 0x24, 0xa3, 0x0, 0x5, [0x6, 0x5, 0x0, 0x2, 0x0, 0x2, 0x5, 0xfffffffe]}, @timestamp_prespec={0x44, 0x34, 0xb1, 0x3, 0xa, [{@rand_addr=0x64010101, 0x5}, {@broadcast, 0xed}, {@multicast1, 0x1}, {@empty, 0x1}, {@rand_addr=0x64010101, 0x2}, {@multicast2, 0x9}]}, @ra={0x94, 0x4, 0x1}]}}}}}) pipe(&(0x7f0000000800)) 21:07:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r8, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000005800)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005380)={0x430, 0x3f3, 0x0, 0x70bd2c, 0x25dfdbfe, {0x1, 0x2, 0x1a, [0x4, 0x2, 0x1ff, 0x80000001, 0x4, 0x4, 0x7, 0x3ff, 0x8, 0x4, 0x1ff, 0x1ff, 0x5, 0xede, 0xffffffff, 0xd3d, 0x645f, 0x1, 0x2, 0x0, 0xe, 0x1, 0xbae, 0x9de, 0x81, 0x6, 0xa4cc, 0x1f, 0x2, 0x1, 0x3, 0x5, 0x2, 0x0, 0x200, 0x0, 0x5, 0x1, 0xc15, 0x10001, 0x2, 0x2, 0x2, 0x0, 0xffff3f0e, 0x8, 0x42, 0x52c, 0x2, 0x80000000, 0x4, 0x6, 0x8, 0x7ff, 0x6, 0x4, 0xddd, 0x9, 0x1f, 0xdd, 0x1f, 0x19, 0x0, 0x101], [0x81, 0xfff, 0x6, 0x25, 0x2, 0x10001, 0x7ff, 0xfffffff9, 0x1000, 0x3b91, 0x9, 0x4, 0x0, 0x98f22a8, 0x7, 0xa9ae, 0x2, 0x6, 0x95, 0x1, 0x1f, 0x44, 0x10000, 0x80000000, 0x6, 0x43, 0x7, 0x0, 0x0, 0xee0, 0x2ba, 0x1, 0x9, 0x5, 0x401, 0x6, 0x7, 0x0, 0x800, 0x1e, 0x3, 0x8ac, 0x8, 0x80, 0x5, 0xffffffff, 0xd1e5, 0x0, 0x6, 0x5, 0x8, 0x80000001, 0x6f20, 0x7, 0x7f, 0x80b, 0x7, 0x30, 0x7, 0x20, 0x0, 0x0, 0x5, 0x3ff], [0x5, 0x8, 0x8, 0x7, 0x20, 0x1ff, 0x1, 0x7fff, 0x5, 0x3, 0x5, 0x7, 0x0, 0x1000, 0x0, 0x9a1f, 0x6c81, 0xfffffffc, 0xfffffffd, 0x3, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x6, 0xbda0, 0x100, 0x88c, 0x9, 0x4, 0x34a, 0x8, 0x66, 0x3ff, 0x7ff, 0x1f, 0x5, 0x627c, 0xffffffa0, 0x1, 0x1dc, 0x70, 0x2, 0x20e, 0xfffff9e9, 0x800, 0x6, 0x7f, 0x401, 0x1, 0x1, 0x6, 0x2, 0x8, 0x1, 0x3, 0x7d, 0xfffffff7, 0x80000000, 0x7, 0x1, 0x8], [0x3, 0x11, 0x4, 0x0, 0x81, 0xfffffff7, 0x1ff, 0x0, 0x8, 0x6, 0x7, 0x81, 0x1c0, 0x5, 0x1, 0x401, 0x1, 0x9, 0x81, 0x7fff, 0x20, 0x7fff, 0x5, 0x101, 0x43, 0x800, 0x0, 0x1, 0x6, 0xdd2, 0x1, 0x0, 0x7fff, 0xfff, 0x2, 0x140000, 0x7, 0x9, 0x8, 0x1, 0x1ff, 0x101, 0x0, 0x3, 0x80000000, 0x3ff, 0x1, 0x3, 0x27, 0x9, 0x6, 0x43, 0x0, 0x5, 0xfffffffa, 0x20, 0x4, 0x4, 0x9, 0x0, 0x3, 0x7, 0x80, 0x8], 0xf, ['-([!%!\x00', '\x81%^}(\x00', '\x00', '\x00']}, ["", "", "", "", "", ""]}, 0x430}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:14 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)) 21:07:14 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001b00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7ff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9d200000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040018}, 0x4008800) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:07:14 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) syz_open_dev$vcsn(&(0x7f00000008c0), 0x1, 0x8001) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:14 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, &(0x7f00000006c0)=""/209) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:14 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:14 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r5, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x108, 0x453, 0x430, 0x70bd2c, 0x25dfdbfb, "87fd6d21d73e8fa4444f0a0b5a2de9aff29264e0ad3be6b6c9d9ee6494440c45ff8347848b531a85d72e58e1b59dfd9f0ec3247d22661a815fc7715905b69223011733c482d185cd11dd3d52f16c3c542f98b710da22630dc61ff2f68b2575442ce4475ec87a15790dd98dcdaec9438ef92a0cf6f7144fc7d422147752d681ba5d4dc73bff2e70a4359f9620f1bae1c6ce435472ef7100448040812468dddeda74791ee91c38069b7574da3bf02af72aa3b679e8c02e59212c90a10866bab02849253f18917467cd68a38182c98ccaaf7986a135bc84f1a5ec8934f4e223d38164b4c3dc2fdb289c690a9279f25347fc2659b0777e", ["", "", "", "", "", ""]}, 0x108}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:14 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:14 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0) 21:07:14 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r8, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x7fff) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:14 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:15 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) syz_open_dev$ptys(0xc, 0x3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:15 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r3, 0xc0505405, &(0x7f0000000640)={{0x3, 0x0, 0x80, 0x2, 0xfffffff7}, 0xffff, 0x1, 0x9f3f}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:15 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)) 21:07:15 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'syztnl2\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x1, 0x8, 0x5, 0x6, {{0x7, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@rr={0x7, 0x7, 0x9d, [@private=0xa010101]}]}}}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:15 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:15 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:15 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r8, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000052c0), &(0x7f0000005300)=0xc) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:15 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socket$unix(0x1, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:23 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:23 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x6, 0x5, 0x9, 0x0, 0x10, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x5, 0xfffffff9}}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:23 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) r8 = socket(0xa, 0x4, 0xfffffffc) sendmsg$AUDIT_USER(r8, &(0x7f0000005280)={&(0x7f00000051c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000005240)={&(0x7f0000005200)={0x20, 0x3ed, 0x400, 0x70bd26, 0x25dfdbff, "5d894c1188bd7d662f4caae2ba8d", ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x20040844) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:23 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010000}, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:23 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) pipe(&(0x7f0000000880)) 21:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:23 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000001980)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0x9c, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x20008000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:23 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x464, 0x300, 0x70bd26, 0x25dfdbfc, "7c001e7568ade6165962fde0e3806f7f49ab8913c5540da7bc26d379c63bc32d73175278071fc1ba4151e35e", ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x20008801) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) socket(0xa, 0x4, 0xfffffffc) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10021}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x3f7, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x400d1}, 0x40840) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:23 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:23 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:23 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000004c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:24 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) pipe(&(0x7f0000005180)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:24 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000014c0)=0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001740)={{{@in6=@private1, @in6=@private0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000001840)=0xe8) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:32 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:32 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) r7 = socket(0x2, 0x80000, 0x4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r8, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6f5e75ed}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 21:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000740)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r4, 0x80605414, &(0x7f0000005100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:32 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f00000014c0)=0x1) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0xa, 0x0, 0x0) 21:07:32 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20028830}, 0xc001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:32 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) recvmmsg$unix(r0, &(0x7f0000000440)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)=""/198, 0xc6}], 0x1, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe0}}], 0x1, 0x40000040, &(0x7f0000000480)={0x77359400}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:32 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r0) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:32 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) r2 = socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000050c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000005080)={&(0x7f0000004f80)={0xd0, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_SOCKETS={0x54, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r1}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}]}, @NBD_ATTR_SOCKETS={0x24, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r4}, {0x8, 0x1, r5}]}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x5}, 0x4040000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, 0x0) 21:07:32 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000100)={0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000140)={[{0x2b, 'devices'}, {0x2b, 'blkio'}, {0x2b, 'hugetlb'}]}, 0x19) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:32 executing program 2: pipe(&(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004f40)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 21:07:40 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001480), 0x60000) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 21:07:40 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:40 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:40 executing program 2: pipe(&(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) socket(0x10, 0x3, 0x3) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/206, 0xce}], 0x1}}, {{&(0x7f00000002c0), 0x6e, &(0x7f0000001400)=[{&(0x7f0000000340)=""/155, 0x9b}, {&(0x7f0000000400)=""/4096, 0x1000}], 0x2, &(0x7f0000001440)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f0000001500)=@abs, 0x6e, &(0x7f0000003940)=[{&(0x7f0000001580)=""/149, 0x95}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000002640)=""/251, 0xfb}, {&(0x7f0000002740)}, {&(0x7f0000002780)=""/171, 0xab}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/53, 0x35}, {&(0x7f0000003880)=""/148, 0x94}], 0x8, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}, {{&(0x7f0000003a80)=@abs, 0x6e, &(0x7f0000004c80)=[{&(0x7f0000003b00)=""/234, 0xea}, {&(0x7f0000003c00)=""/76, 0x4c}, {&(0x7f0000003c80)=""/4096, 0x1000}], 0x3, &(0x7f0000004cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000004d00), 0x6e, &(0x7f0000004d80)}}], 0x5, 0x10000, &(0x7f0000004f00)={0x0, 0x3938700}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 21:07:40 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)) pipe(&(0x7f0000000100)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:40 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r3, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:40 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:07:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:40 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:40 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)={0xffffffffffffffff}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000180)=0x80000001, 0x4) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) 21:07:40 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) pipe(&(0x7f00000000c0)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:48 executing program 2: pipe(&(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) socket(0x10, 0x3, 0x3) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:48 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000500)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:48 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:07:48 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'perf_event'}, {0x2d, 'pids'}, {0x2d, 'hugetlb'}, {0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x2d, 'hugetlb'}, {0x2b, 'perf_event'}, {0x2d, 'io'}, {0x2b, 'cpuacct'}]}, 0x47) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000001c0)={{0x1, 0x0, 0x9, 0x3, 0x4b4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:48 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x9, 0x4, 0x3f) pipe(&(0x7f0000000140)) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 21:07:48 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:48 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040080}, 0x24000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:48 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) socket(0x9, 0x4, 0x3f) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 21:07:48 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)={0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0xff, 0x2, 0x20, 0x3}, &(0x7f0000000180)=0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:48 executing program 6: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:48 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000240)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:48 executing program 2: pipe(&(0x7f0000000040)) syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x260002) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:48 executing program 7: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) [ 187.763525] Bluetooth: hci5: command 0x0406 tx timeout [ 187.764832] Bluetooth: hci4: command 0x0406 tx timeout [ 187.765934] Bluetooth: hci7: command 0x0406 tx timeout [ 187.766483] Bluetooth: hci1: command 0x0406 tx timeout [ 187.767143] Bluetooth: hci6: command 0x0406 tx timeout [ 187.768342] Bluetooth: hci2: command 0x0406 tx timeout [ 187.768836] Bluetooth: hci0: command 0x0406 tx timeout [ 187.769884] Bluetooth: hci3: command 0x0406 tx timeout 21:07:55 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:55 executing program 6: setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f00000062c0)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 21:07:55 executing program 7: pipe(&(0x7f00000019c0)={0xffffffffffffffff}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) 21:07:55 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r2, 0x7800, 0x700, 0x1, 0x4000, {{0x16, 0x4, 0x2, 0x26, 0x58, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x44, 0xc9, 0x1, 0x3, [{@broadcast, 0x6}, {@loopback, 0x1ff}, {@multicast1, 0x7}, {@private=0xa010102, 0x3}, {@multicast1, 0xda28d66}, {@multicast2, 0x3}, {@private=0xa010101, 0x6}, {@multicast1, 0x2}]}]}}}}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:07:55 executing program 2: pipe(&(0x7f0000000040)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:55 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:07:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) pipe(&(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:56 executing program 7: pipe(0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:56 executing program 6: setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) 21:07:56 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:07:56 executing program 7: pipe(0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:56 executing program 2: io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:56 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:07:56 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:07:56 executing program 6: pipe(0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:07:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:07:56 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) syz_open_dev$ptys(0xc, 0x3, 0x0) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:04 executing program 6: pipe(0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:08:04 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:04 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:04 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:04 executing program 7: pipe(0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:08:04 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:04 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r3, &(0x7f00000003c0)={0x1, @remote_oob_ext_data_reply={{0x445, 0x46}, {@none, "0aeab07b78735eddb0cc17867e0e0d87", "b343468a32592200bd8067dbe40dbd96", "3d5e7f6f06b4d9265913020ebb973be4", "439441733359ca5ccd0b7285be24fdde"}}}, 0x4a) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r4, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:04 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) syz_open_dev$ptys(0xc, 0x3, 0x0) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:04 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:04 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:04 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gretap0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:05 executing program 7: pipe(&(0x7f00000019c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:08:05 executing program 6: pipe(0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:08:05 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x40) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:05 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:05 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) syz_open_dev$ptys(0xc, 0x3, 0x0) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:05 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:05 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:13 executing program 7: pipe(&(0x7f00000019c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:08:13 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:13 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x464, 0x200, 0x70bd29, 0x25dfdbfc, "2aea1f83b9616591e17e753e62d7018e37e6b5189e98d4", ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:13 executing program 6: pipe(0x0) 21:08:13 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:13 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:13 executing program 7: pipe(&(0x7f00000019c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 21:08:13 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:13 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:13 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:23 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:23 executing program 1: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:23 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:23 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) 21:08:23 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000280)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0x3e9, 0x200, 0x70bd27, 0x25dfdbfb, {0xdf7eccc6a8854654, 0x1, 0x0, r3, 0x6, 0x6000000, 0x80000001, 0x1, 0x0, 0x8001}, ["", "", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x20000004) sendmsg$NLBL_MGMT_C_VERSION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:23 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:23 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) ioctl$HIDIOCGRAWNAME(r0, 0x80404804, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:23 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:23 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:23 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x5000000000, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:23 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:23 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:23 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:23 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', r2, 0x20, 0x7, 0x6, 0xfffffff9, {{0xe, 0x4, 0x0, 0x6, 0x38, 0x65, 0x0, 0x81, 0x2f, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x7, 0xaa, [@dev={0xac, 0x14, 0x14, 0x36}]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @broadcast, @local]}]}}}}}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:23 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) 21:08:23 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:23 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:32 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:32 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:32 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x3f, 0x0, 0x52, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x7800, 0x34d19857, 0xffffffc0}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:32 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:32 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:32 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) 21:08:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:32 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:32 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:32 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:32 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:08:40 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) 21:08:40 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:40 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:40 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:40 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:40 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:40 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:08:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:40 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:40 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:40 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21:08:40 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:40 executing program 0: syz_open_dev$vcsn(0x0, 0x5000000000, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:41 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:48 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:48 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:48 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) 21:08:48 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x94400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:48 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:48 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:48 executing program 0: syz_open_dev$vcsn(0x0, 0x5000000000, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sched_getparam(r2, &(0x7f0000000380)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:49 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:49 executing program 0: syz_open_dev$vcsn(0x0, 0x5000000000, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:49 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:49 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) 21:08:49 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:49 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:49 executing program 6: ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:58 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:58 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:58 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:58 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:08:58 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:08:58 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:58 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:08:58 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:08:58 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:08:58 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:08:58 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:06 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:06 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:06 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:06 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:06 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:06 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, 0x0, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) getpeername(r0, &(0x7f0000000280)=@hci, &(0x7f0000000300)=0x80) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:06 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:06 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000240)=r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:06 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:06 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:07 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:07 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={r1, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:07 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:07 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:15 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:15 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:15 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:15 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:15 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) pipe(&(0x7f0000000800)) 21:09:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:15 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:15 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) pipe(&(0x7f0000000800)) 21:09:24 executing program 3: ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000000)="7d49bac345bd227ddd091c1c3abdfc5175a103396c758bd04789cde15d74856afbe47e8c140970ee9563a04075864ccc778e988364b8056f91689ac07db77015a40718f93d6d89440e73a901c5db57d2bec1a3a40016b0e6dc80c24e3182a9b88692ac3cd8abc71c43668cb0f490d0c4ffad9e2c4fb4eb91310c6e74da2516d8a2f6569ecf91619280cea43b1e7c4cd59418c9") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:24 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:24 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:24 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:24 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) pipe(&(0x7f0000000800)) 21:09:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:24 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:24 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:24 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:25 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:33 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:33 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:09:33 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:33 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:33 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:33 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:33 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:33 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:33 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:33 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:33 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:34 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:34 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:34 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:34 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:34 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) [ 289.019105] Zero length message leads to an empty skb [ 289.076968] cgroup: fork rejected by pids controller in /syz5 21:09:42 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:09:42 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:42 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:42 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:42 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:42 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x0, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:42 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:42 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x0, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:51 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:51 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:51 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:51 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:51 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:09:51 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:51 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:51 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x0, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:51 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:51 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:09:51 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x0, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:09:51 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x7, 0x7, 0x165, &(0x7f00000007c0)}) 21:09:51 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:09:51 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:09:51 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:09:51 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:09:51 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:09:51 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:10:01 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x0, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:01 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:01 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x34, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x51}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:10:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:10:01 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:01 executing program 4: ioctl$sock_ifreq(0xffffffffffffffff, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:01 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:10:01 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:01 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x0, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:01 executing program 4: ioctl$sock_ifreq(0xffffffffffffffff, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:10:01 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:10:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:10:09 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:10:09 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:10:09 executing program 4: ioctl$sock_ifreq(0xffffffffffffffff, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:09 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:09 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x3c, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:09 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:10:09 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:09 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x7, 0x165, &(0x7f00000007c0)}) 21:10:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x34, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:09 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:09 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:09 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x2c, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:10 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:10 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:10 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) pipe(&(0x7f0000000800)) 21:10:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:10 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:10 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:10 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20000000) 21:10:10 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(&(0x7f0000000800)) 21:10:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:19 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(0xffffffffffffffff, 0x440f, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:19 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20000000) 21:10:19 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(0x0) 21:10:19 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:19 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, &(0x7f00000007c0)}) 21:10:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:19 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x20000000) 21:10:19 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}}, 0x20000000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:19 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:19 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(0x0) 21:10:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)) 21:10:27 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:10:27 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:10:27 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000000)={'geneve0\x00', @ifru_hwaddr=@remote}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:27 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(0x0) 21:10:27 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:27 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:27 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(0x0) 21:10:27 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 21:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:27 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(0x0) 21:10:27 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:27 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 21:10:27 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:36 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:36 executing program 1: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x80401, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, 0x0, 0x4}, 0x14}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 21:10:36 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:36 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:10:36 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:10:36 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:36 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14}, 0x14}}, 0x0) pipe(0x0) 21:10:36 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:46 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:10:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:46 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 21:10:46 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) 21:10:46 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:10:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:46 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) 21:10:46 executing program 0: syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x0) pipe(0x0) 21:10:46 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:46 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) [ 361.211546] cgroup: fork rejected by pids controller in /syz2 21:10:55 executing program 0: pipe(0x0) 21:10:55 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:55 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:55 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:55 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:10:55 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:55 executing program 0: pipe(0x0) 21:10:55 executing program 0: pipe(0x0) 21:10:55 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:55 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:55 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:55 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:55 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:55 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:10:55 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:55 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, 0x0, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:55 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:56 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:10:56 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:10:56 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:10:56 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:10:56 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:10:56 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:10:56 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:05 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:05 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:05 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:05 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:11:05 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:05 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:11:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:05 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:06 executing program 1: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:06 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:06 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:06 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:15 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:15 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:15 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:11:15 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) 21:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:15 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:15 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:15 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:15 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x0, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:15 executing program 3: ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:15 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) [ 390.496523] cgroup: fork rejected by pids controller in /syz7 21:11:24 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) r6 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r6, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:11:24 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:24 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) 21:11:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8400}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:24 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:24 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:24 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:24 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:24 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:24 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:32 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:32 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:32 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x165, 0x0}) 21:11:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:32 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000bc0)={0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}) 21:11:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x0, 0x4, 0x70bd26, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:32 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:32 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:32 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) [ 407.916070] [ 407.916434] ===================================== [ 407.917171] WARNING: bad unlock balance detected! [ 407.917904] 6.19.0-rc5-next-20260116 #1 Not tainted [ 407.918674] ------------------------------------- [ 407.919427] syz-executor.1/284 is trying to release lock (rcu_read_lock) at: [ 407.920530] [] __wait_on_freeing_inode+0x105/0x350 [ 407.921535] but there are no more locks to release! [ 407.922297] [ 407.922297] other info that might help us debug this: [ 407.923318] 4 locks held by syz-executor.1/284: [ 407.924045] #0: ffff88800f95c3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 407.925714] #1: ffff88801be2ecb8 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 407.932501] #2: ffff88800f940950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 407.933898] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 407.935351] [ 407.935351] stack backtrace: [ 407.936052] CPU: 0 UID: 0 PID: 284 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 407.936080] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 407.936093] Call Trace: [ 407.936101] [ 407.936109] dump_stack_lvl+0xca/0x120 [ 407.936153] ? __wait_on_freeing_inode+0x105/0x350 [ 407.936182] print_unlock_imbalance_bug+0x118/0x130 [ 407.936210] ? __wait_on_freeing_inode+0x105/0x350 [ 407.936238] lock_release+0x1ee/0x270 [ 407.936267] __wait_on_freeing_inode+0x10a/0x350 [ 407.936295] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 407.936326] ? __pfx_var_wake_function+0x10/0x10 [ 407.936359] ? lock_is_held_type+0x9e/0x120 [ 407.936382] insert_inode_locked+0x25f/0x890 [ 407.936414] __ext4_new_inode+0x223d/0x4cd0 [ 407.936447] ? __pfx___ext4_new_inode+0x10/0x10 [ 407.936474] ? __pfx_avc_has_perm+0x10/0x10 [ 407.936501] ? __pfx___dquot_initialize+0x10/0x10 [ 407.936540] ext4_mkdir+0x331/0xb30 [ 407.936575] ? __pfx_ext4_mkdir+0x10/0x10 [ 407.936605] ? security_inode_permission+0x72/0xe0 [ 407.936631] vfs_mkdir+0x6d8/0xc00 [ 407.936663] filename_mkdirat+0x118/0x430 [ 407.936688] ? __pfx_filename_mkdirat+0x10/0x10 [ 407.936713] ? strncpy_from_user+0x21b/0x2f0 [ 407.936745] __x64_sys_mkdir+0x6e/0xd0 [ 407.936769] do_syscall_64+0xbf/0x420 [ 407.936794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.936817] RIP: 0033:0x7efd21f08c27 [ 407.936834] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 407.936855] RSP: 002b:00007ffdaaf35be8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 407.936876] RAX: ffffffffffffffda RBX: 00007ffdaaf35c70 RCX: 00007efd21f08c27 [ 407.936892] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffdaaf35c70 [ 407.936906] RBP: 00007ffdaaf35c4c R08: 0000000000000000 R09: 0000000000000004 [ 407.936920] R10: 00007ffdaaf35986 R11: 0000000000000206 R12: 0000000000000032 [ 407.936934] R13: 00000000000638b2 R14: 0000000000000002 R15: 00007ffdaaf35cb0 [ 407.936955] [ 407.968305] ------------[ cut here ]------------ [ 407.971104] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.1/284 [ 407.972852] Modules linked in: [ 407.973500] CPU: 0 UID: 0 PID: 284 Comm: syz-executor.1 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 407.975100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 407.976513] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 407.977521] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 407.980477] RSP: 0018:ffff8880169d79e0 EFLAGS: 00010286 [ 407.981316] RAX: 00000000ffffffff RBX: ffff88801b7e3700 RCX: ffffffff815660f7 [ 407.982494] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801b7e3afc [ 407.983676] RBP: ffff88801b7e3700 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 407.984854] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801b7e3700 [ 407.986038] R13: 0000000000000001 R14: ffffffff85c0ca20 R15: ffff88802b59d8e0 [ 407.987221] FS: 000055555f8f4400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 407.988551] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.989527] CR2: 000055558e2fdc58 CR3: 000000000c72c000 CR4: 0000000000350ef0 [ 407.990716] Call Trace: [ 407.991185] [ 407.992682] __wait_on_freeing_inode+0x10f/0x350 [ 407.994055] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 407.996257] ? __pfx_var_wake_function+0x10/0x10 [ 407.998834] ? lock_is_held_type+0x9e/0x120 [ 408.001073] insert_inode_locked+0x25f/0x890 [ 408.004376] __ext4_new_inode+0x223d/0x4cd0 [ 408.009518] ? __pfx___ext4_new_inode+0x10/0x10 [ 408.011517] ? __pfx_avc_has_perm+0x10/0x10 [ 408.012766] ? __pfx___dquot_initialize+0x10/0x10 [ 408.017302] ext4_mkdir+0x331/0xb30 [ 408.021313] ? __pfx_ext4_mkdir+0x10/0x10 [ 408.022642] ? security_inode_permission+0x72/0xe0 [ 408.025941] vfs_mkdir+0x6d8/0xc00 [ 408.028753] filename_mkdirat+0x118/0x430 [ 408.030943] ? __pfx_filename_mkdirat+0x10/0x10 [ 408.032522] ? strncpy_from_user+0x21b/0x2f0 [ 408.036288] __x64_sys_mkdir+0x6e/0xd0 [ 408.037604] do_syscall_64+0xbf/0x420 [ 408.039191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.040266] RIP: 0033:0x7efd21f08c27 [ 408.041064] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 408.043948] RSP: 002b:00007ffdaaf35be8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 408.045188] RAX: ffffffffffffffda RBX: 00007ffdaaf35c70 RCX: 00007efd21f08c27 [ 408.046369] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffdaaf35c70 [ 408.047558] RBP: 00007ffdaaf35c4c R08: 0000000000000000 R09: 0000000000000004 [ 408.048748] R10: 00007ffdaaf35986 R11: 0000000000000206 R12: 0000000000000032 [ 408.049930] R13: 00000000000638b2 R14: 0000000000000002 R15: 00007ffdaaf35cb0 [ 408.055252] [ 408.055727] irq event stamp: 545775 [ 408.056287] hardirqs last enabled at (545775): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 408.060674] hardirqs last disabled at (545774): [] _raw_spin_lock_irqsave+0x53/0x60 [ 408.064328] softirqs last enabled at (545770): [] kernel_fpu_end+0x59/0x70 [ 408.066012] softirqs last disabled at (545768): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 408.067657] ---[ end trace 0000000000000000 ]--- 21:11:40 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:40 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:40 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:11:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:11:40 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) 21:11:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:11:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:40 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) 21:11:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:11:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:11:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:40 executing program 5: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) r0 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r0, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) r4 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r4, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:40 executing program 0: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000640)) socket(0x2, 0x80000, 0x4) 21:11:40 executing program 2: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xfff) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000240)=0x401) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000640)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f0000000680)) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r2) 21:11:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8400}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000200)={0x0, 0x3, 0xffffffffffffffff, 0x2, 0x80000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000801}, 0x24004005) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000800)=0x5) syz_genetlink_get_family_id$smc(&(0x7f00000009c0), 0xffffffffffffffff) 21:11:40 executing program 7: ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000000)={"c9214918af2272faca52203c6698c576", 0x0, 0x0, {0x9, 0x8000}, {0x2c3, 0x2}, 0x5, [0x2, 0xb4, 0x10001, 0x2, 0x8001, 0x5, 0x3, 0x9, 0x7f, 0x10001, 0x1, 0x3, 0x3, 0x100000001, 0x6]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"edd67d2fa2b95c9833ef2248aed083ec", 0x0, r0, {0x1, 0x186}, {0xfffffffffffffc28, 0x7}, 0x39e, [0x100000000, 0x9, 0x22b, 0x4, 0x9, 0x3, 0x7479, 0x1, 0x100, 0x9, 0x101, 0x6, 0xff, 0x9, 0x0, 0x1]}) r1 = syz_open_dev$vcsn(&(0x7f0000000200), 0xa2f4, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xfff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r2, 0x300, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {0xd9b}, @device_b, @device_b}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004890}, 0x4040845) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_GET(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3e8, 0x400, 0x70bd28, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000010) fork() r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600), 0x86c0, 0x0) ioctl$RNDGETENTCNT(r5, 0x80045200, &(0x7f0000000640)) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000680)) socket(0x2, 0x80000, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r3) 21:11:40 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:11:40 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, 0x0) 21:11:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 21:11:40 executing program 6: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0xffa5, 0x4, 0x7, 0xffff}]}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9b40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7ff}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) VM DIAGNOSIS: 21:11:33 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff8880169d74c8 R8 =0000000000000000 R9 =ffffed100169c046 R10=000000000000005b R11=666666203a312320 R12=000000000000005b R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555f8f4400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5800000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055558e2fdc58 CR3=000000000c72c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88801b40fb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003681f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801b40fb48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555582328400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe2800000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f533084a710 CR3=0000000007189000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007fb1ecb2e7c000007fb1ecb2e7c8 XMM02=00007fb1ecb2e7e000007fb1ecb2e7c0 XMM03=00007fb1ecb2e7c800007fb1ecb2e7c0 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000