Warning: Permanently added '[localhost]:22481' (ECDSA) to the list of known hosts. 2026/01/19 00:36:43 fuzzer started 2026/01/19 00:36:44 dialing manager at localhost:42157 syzkaller login: [ 44.586448] cgroup: Unknown subsys name 'net' [ 44.652183] cgroup: Unknown subsys name 'cpuset' [ 44.673639] cgroup: Unknown subsys name 'rlimit' 2026/01/19 00:36:55 syscalls: 208 2026/01/19 00:36:55 code coverage: enabled 2026/01/19 00:36:55 comparison tracing: enabled 2026/01/19 00:36:55 extra coverage: enabled 2026/01/19 00:36:55 setuid sandbox: enabled 2026/01/19 00:36:55 namespace sandbox: enabled 2026/01/19 00:36:55 Android sandbox: enabled 2026/01/19 00:36:55 fault injection: enabled 2026/01/19 00:36:55 leak checking: enabled 2026/01/19 00:36:55 net packet injection: enabled 2026/01/19 00:36:55 net device setup: enabled 2026/01/19 00:36:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/19 00:36:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/19 00:36:55 USB emulation: enabled 2026/01/19 00:36:55 hci packet injection: enabled 2026/01/19 00:36:55 wifi device emulation: enabled 2026/01/19 00:36:55 802.15.4 emulation: enabled 2026/01/19 00:36:55 fetching corpus: 0, signal 0/0 (executing program) 2026/01/19 00:36:57 starting 8 fuzzer processes 00:36:57 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:36:57 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4044081) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000d80)={0x0, 0x13, "0c3a77f044af316551bdf0d4ad0d1738b67daf"}) 00:36:57 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:36:57 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x44000) modify_ldt$read_default(0x2, &(0x7f0000000880)=""/187, 0xbb) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x428800, 0x0) process_madvise(r9, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) [ 56.245275] audit: type=1400 audit(1768783017.330:7): avc: denied { execmem } for pid=272 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 00:36:57 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x48b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x34}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:36:57 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) r10 = syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r11, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2, 0x0, r10}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:36:57 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) r5 = socket(0x1f, 0x2daa30d61cb1afd0, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f40)={'gre0\x00', r4, 0x1, 0x10, 0x2, 0x10001, {{0x25, 0x4, 0x3, 0x16, 0x94, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0xf6, [@private=0xa010100, @private=0xa010100, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x67, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x61, 0x3, 0x5, [{@private=0xa010102, 0xffffffff}, {@local, 0x2}, {@multicast1, 0xfffff54c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) r6 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x87b79a7}]}, 0x60}}, 0x4044000) 00:36:57 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e8, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8a2e08af3b4d42d9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1e8}}, 0x2) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) [ 57.419334] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.422958] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.424720] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.430937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.433942] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.439906] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.444218] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.446343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.462651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.465726] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.490087] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.494420] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.496061] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.505914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.509722] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.620284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.622680] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.646868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.650042] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 57.656036] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.664019] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.665483] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 57.671923] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 57.676906] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.684022] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 57.692015] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.694020] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.695409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 57.704426] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.706184] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.710031] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.720259] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 57.723488] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 57.746139] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 57.751867] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 57.756545] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 57.760440] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 57.769122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 57.784947] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 57.801937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 59.508955] Bluetooth: hci1: command tx timeout [ 59.510050] Bluetooth: hci0: command tx timeout [ 59.571139] Bluetooth: hci2: command tx timeout [ 59.762882] Bluetooth: hci3: command tx timeout [ 59.763459] Bluetooth: hci6: command tx timeout [ 59.829079] Bluetooth: hci4: command tx timeout [ 59.891993] Bluetooth: hci5: command tx timeout [ 59.955814] Bluetooth: hci7: command tx timeout [ 61.554898] Bluetooth: hci0: command tx timeout [ 61.555330] Bluetooth: hci1: command tx timeout [ 61.619831] Bluetooth: hci2: command tx timeout [ 61.811816] Bluetooth: hci6: command tx timeout [ 61.812236] Bluetooth: hci3: command tx timeout [ 61.875915] Bluetooth: hci4: command tx timeout [ 61.938887] Bluetooth: hci5: command tx timeout [ 62.003351] Bluetooth: hci7: command tx timeout [ 63.602825] Bluetooth: hci1: command tx timeout [ 63.603262] Bluetooth: hci0: command tx timeout [ 63.668796] Bluetooth: hci2: command tx timeout [ 63.859822] Bluetooth: hci3: command tx timeout [ 63.860228] Bluetooth: hci6: command tx timeout [ 63.924292] Bluetooth: hci4: command tx timeout [ 63.988049] Bluetooth: hci5: command tx timeout [ 64.051915] Bluetooth: hci7: command tx timeout [ 65.653378] Bluetooth: hci0: command tx timeout [ 65.653903] Bluetooth: hci1: command tx timeout [ 65.715865] Bluetooth: hci2: command tx timeout [ 65.909242] Bluetooth: hci3: command tx timeout [ 65.909678] Bluetooth: hci6: command tx timeout [ 65.973868] Bluetooth: hci4: command tx timeout [ 66.035086] Bluetooth: hci5: command tx timeout [ 66.099105] Bluetooth: hci7: command tx timeout [ 88.852262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.856801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.040733] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.041354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.437817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.438433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.447054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.447670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.536627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.537276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.735922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.736549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:37:32 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4044081) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000d80)={0x0, 0x13, "0c3a77f044af316551bdf0d4ad0d1738b67daf"}) [ 91.966895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.967495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.066525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.067223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.198829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.199467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:37:33 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4044081) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000d80)={0x0, 0x13, "0c3a77f044af316551bdf0d4ad0d1738b67daf"}) [ 92.337760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.343826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:37:33 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x48b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x34}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:37:33 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:37:33 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x48b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x34}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:37:33 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4044081) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000d80)={0x0, 0x13, "0c3a77f044af316551bdf0d4ad0d1738b67daf"}) 00:37:33 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) [ 92.755547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.767982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:37:33 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x34, r8, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x48b}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffff}]}, 0x34}}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) [ 92.889352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.890012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.993901] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.994521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.025409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.026073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.076159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.076826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.104614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.105298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 00:37:46 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:37:46 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:37:46 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:37:46 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9a}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5a0}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4044081) 00:37:46 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) r5 = socket(0x1f, 0x2daa30d61cb1afd0, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f40)={'gre0\x00', r4, 0x1, 0x10, 0x2, 0x10001, {{0x25, 0x4, 0x3, 0x16, 0x94, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0xf6, [@private=0xa010100, @private=0xa010100, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x67, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x61, 0x3, 0x5, [{@private=0xa010102, 0xffffffff}, {@local, 0x2}, {@multicast1, 0xfffff54c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) r6 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x87b79a7}]}, 0x60}}, 0x4044000) 00:37:46 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e8, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8a2e08af3b4d42d9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1e8}}, 0x2) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:37:46 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x44000) modify_ldt$read_default(0x2, &(0x7f0000000880)=""/187, 0xbb) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x428800, 0x0) process_madvise(r9, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:37:46 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) r10 = syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r11, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2, 0x0, r10}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:37:46 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) r10 = syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r11, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2, 0x0, r10}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:37:46 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) r5 = socket(0x1f, 0x2daa30d61cb1afd0, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f40)={'gre0\x00', r4, 0x1, 0x10, 0x2, 0x10001, {{0x25, 0x4, 0x3, 0x16, 0x94, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0xf6, [@private=0xa010100, @private=0xa010100, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x67, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x61, 0x3, 0x5, [{@private=0xa010102, 0xffffffff}, {@local, 0x2}, {@multicast1, 0xfffff54c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) r6 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x87b79a7}]}, 0x60}}, 0x4044000) 00:37:54 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x44000) modify_ldt$read_default(0x2, &(0x7f0000000880)=""/187, 0xbb) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x428800, 0x0) process_madvise(r9, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:37:54 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e8, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8a2e08af3b4d42d9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1e8}}, 0x2) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:37:54 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) r5 = socket(0x1f, 0x2daa30d61cb1afd0, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f40)={'gre0\x00', r4, 0x1, 0x10, 0x2, 0x10001, {{0x25, 0x4, 0x3, 0x16, 0x94, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0xf6, [@private=0xa010100, @private=0xa010100, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x67, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x61, 0x3, 0x5, [{@private=0xa010102, 0xffffffff}, {@local, 0x2}, {@multicast1, 0xfffff54c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) r6 = pidfd_getfd(r1, r0, 0x0) sendmsg$IPVS_CMD_GET_DEST(r6, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x60, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x87b79a7}]}, 0x60}}, 0x4044000) 00:37:54 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) r10 = syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r11, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2, 0x0, r10}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:37:54 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:37:54 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) 00:37:54 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:37:54 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) 00:37:54 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:37:54 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) r5 = socket(0x1f, 0x2daa30d61cb1afd0, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f40)={'gre0\x00', r4, 0x1, 0x10, 0x2, 0x10001, {{0x25, 0x4, 0x3, 0x16, 0x94, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0xf6, [@private=0xa010100, @private=0xa010100, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x67, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x61, 0x3, 0x5, [{@private=0xa010102, 0xffffffff}, {@local, 0x2}, {@multicast1, 0xfffff54c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) pidfd_getfd(r1, r0, 0x0) 00:37:54 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) 00:37:54 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_GET_CPUID(0x1011) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1e8, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0xf8, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8a2e08af3b4d42d9}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x1e8}}, 0x2) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:37:54 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000c40)={'syztnl0\x00', &(0x7f0000000bc0)={'ip6_vti0\x00', 0x0, 0x29, 0x20, 0x7d, 0x65b, 0x7a, @mcast2, @loopback, 0x10, 0x1, 0xe0000000, 0x200}}) 00:37:54 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x44000) modify_ldt$read_default(0x2, &(0x7f0000000880)=""/187, 0xbb) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000940), 0x428800, 0x0) process_madvise(r9, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:37:54 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) openat$cgroup_int(r7, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:37:54 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) 00:38:02 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:02 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x90}, 0x4000) 00:38:02 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:02 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x44000) modify_ldt$read_default(0x2, &(0x7f0000000880)=""/187, 0xbb) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:02 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) r5 = socket(0x1f, 0x2daa30d61cb1afd0, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000001000)={'gretap0\x00', &(0x7f0000000f40)={'gre0\x00', r4, 0x1, 0x10, 0x2, 0x10001, {{0x25, 0x4, 0x3, 0x16, 0x94, 0x68, 0x0, 0x2, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, @rand_addr=0x64010102, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0xf6, [@private=0xa010100, @private=0xa010100, @loopback, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x1f}, @empty, @dev={0xac, 0x14, 0x14, 0x3c}]}, @ssrr={0x89, 0x1f, 0xe7, [@dev={0xac, 0x14, 0x14, 0x11}, @loopback, @broadcast, @loopback, @multicast2, @remote, @multicast2]}, @lsrr={0x83, 0x13, 0x67, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x24, 0x61, 0x3, 0x5, [{@private=0xa010102, 0xffffffff}, {@local, 0x2}, {@multicast1, 0xfffff54c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}]}]}}}}}) 00:38:02 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:02 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) socket$nl_xfrm(0x10, 0x3, 0x6) arch_prctl$ARCH_GET_CPUID(0x1011) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:02 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:02 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:02 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x44801) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:02 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:10 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000300)=0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r7, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000006c0)={0x138, r8, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x44000) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:10 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:10 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb8, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x408c000) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:10 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:10 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:10 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4040) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:10 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:10 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)=0x0) syz_io_uring_submit(r1, r10, &(0x7f0000000700)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x2007, @fd_index=0x2, 0x10d, 0x0, 0x0, 0x5, 0x1, {0x2}}, 0xb899) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:10 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000d00)={r4, 0x1, 0x6, @multicast}, 0x10) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:10 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:10 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000700)={@loopback}, &(0x7f0000000740)=0x14) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:11 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:11 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) r10 = syz_io_uring_setup(0x444c, &(0x7f0000000600)={0x0, 0xb116, 0x4, 0x3, 0x12f, 0x0, r0}, &(0x7f0000c39000/0x4000)=nil, &(0x7f0000c80000/0x3000)=nil, &(0x7f0000000680), &(0x7f00000006c0)) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2, 0x0, r10}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:11 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xb0, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010100}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:gpg_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:watchdog_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:11 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) r7 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r7) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:11 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000cc0)={'veth1_to_bond\x00'}) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:19 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:19 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@initdev, @in=@remote}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f00000006c0)=0xe8) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000d29000/0x1000)=nil, 0x1000, 0x1, 0x30, r9, 0x8000000) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:19 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r6, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008085}, 0x200008d4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:19 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:19 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000300)=0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80004}, 0x8080) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:19 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040001) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:19 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:19 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/module/nf_conntrack_sip', 0x82542, 0x10) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:19 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:19 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xa3}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x935}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x68}}, 0x800) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:19 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r8, &(0x7f0000000580), 0x2, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:20 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:20 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:28 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r0) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:28 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000940), r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:28 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:28 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x5c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2a}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20044800}, 0x1) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:28 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000000740)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:28 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:28 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000300)=0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:28 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, &(0x7f0000000980)={'ip6tnl0\x00', &(0x7f0000000900)={'ip6tnl0\x00', r2, 0x29, 0x2, 0x4, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x8, 0x700, 0x1ff, 0x4}}) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:28 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00'}) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:28 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:29 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x1) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:29 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:29 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:38:29 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:29 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:29 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000780)='/sys/module/pcmcia', 0x42001, 0x84) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:29 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:37 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) r5 = pidfd_getfd(r0, r0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) 00:38:37 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:37 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x84, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5a}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40004}, 0x2) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:37 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f0000000300)=0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000340)) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x810}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r5, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9bb1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff01}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:37 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:37 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:38:37 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ca9000/0x2000)=nil, 0x2000, 0x2000006, 0x110, r2, 0x8000000) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:37 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) connect(r0, &(0x7f0000000440)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:37 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xc0, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x3}}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x8}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2b}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x801}, 0x11) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:37 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x4}, 0x1}, 0xffffff80) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:37 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:37 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x700, 0x1, 0xeb, 0x2, {{0x23, 0x4, 0x2, 0x6, 0x8c, 0x68, 0x0, 0x6, 0x4, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x27, 0x7e, [@loopback, @empty, @local, @dev={0xac, 0x14, 0x14, 0x37}, @empty, @private=0xa010100, @rand_addr=0x64010101, @rand_addr=0x64010101, @empty]}, @end, @end, @end, @timestamp_addr={0x44, 0x3c, 0x6, 0x1, 0xc, [{@multicast1}, {@private=0xa010102, 0x2}, {@multicast2, 0x6}, {@rand_addr=0x64010101, 0x40}, {@rand_addr=0x64010100}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x100}, {@multicast1, 0xc90c}]}, @lsrr={0x83, 0xf, 0x29, [@multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop]}}}}}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:37 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000300)=0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), r0) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:37 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) pidfd_getfd(0xffffffffffffffff, r0, 0x0) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:37 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x24c, 0x0, 0x210, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xff}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7f}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf49a}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x13}}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4b}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xfd}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x24c}}, 0x80) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:37 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'ip6_vti0\x00', r2, 0x4, 0x25, 0x0, 0x1, 0x8d, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x20, 0x80, 0x2, 0x6}}) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:38:37 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000008c0)=0xff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), 0xffffffffffffffff) 00:38:37 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r6 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r6, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r7, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:37 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r7 = io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000d71000/0x3000)=nil, 0x3000, 0x1, 0x8010, r7, 0x8000000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:38 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:46 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) io_uring_setup(0x175a, &(0x7f00000003c0)={0x0, 0xd06c, 0x0, 0x3, 0x10c, 0x0, r0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:46 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) r3 = gettid() sched_rr_get_interval(r3, &(0x7f00000003c0)) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:46 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:38:46 executing program 5: r0 = syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:46 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:46 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000300)=0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000340)) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:46 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000880)=0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:46 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:46 executing program 5: syz_io_uring_setup(0x245a, &(0x7f0000000000)={0x0, 0xae1e, 0x1, 0x0, 0xa1}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:46 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:46 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) gettid() rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:46 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:46 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r4, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004010) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:38:46 executing program 5: socket(0x1f, 0x2daa30d61cb1afd0, 0x80) 00:38:46 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) inotify_init1(0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:55 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:38:55 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:38:55 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000300)=0x1) socket$inet_udp(0x2, 0x2, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:55 executing program 5: socket(0x0, 0x2daa30d61cb1afd0, 0x80) 00:38:55 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:38:55 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:38:55 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:38:55 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) clock_getres(0x2, &(0x7f0000000380)) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:55 executing program 5: socket(0x0, 0x0, 0x80) 00:38:55 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) pselect6(0x40, &(0x7f0000000200)={0x401, 0x3d4b, 0x3, 0x81, 0x6, 0x800, 0x3}, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x8, 0x8001, 0x3, 0x4, 0x9, 0x5}, &(0x7f0000000280)={0x1, 0x7, 0x5, 0xbd, 0x1, 0x100000000, 0xffff, 0x3}, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0x2]}, 0x8}) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:38:55 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000300)=0x1) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:38:55 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) [ 179.638264] Bluetooth: hci2: command 0x0406 tx timeout [ 179.639434] Bluetooth: hci0: command 0x0406 tx timeout [ 179.640603] Bluetooth: hci1: command 0x0406 tx timeout 00:39:03 executing program 5: socket(0x0, 0x0, 0x80) 00:39:03 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) r6 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r6, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:03 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:39:03 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x48, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:03 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:39:03 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) openat$urandom(0xffffffffffffff9c, &(0x7f00000002c0), 0x1d1000, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:39:03 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2, 0x0}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x40) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:03 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) sendto$packet(r5, &(0x7f00000006c0)="60c8b3e09690883844d05a96d0c9317b60fbeeeddb65be6067f060aabda9f2fae0cc65a28c79062469117bdbb0a9265c91a7aba709dfb6dbb988e8001c0503173d6d2c194acfe5f4ba7533d06410d8706f4c7b0472d5b12df82907ff2cf366c56ccc4dfc3d53eef6168f9f89fccf090970d95482c2340290deb4c298781844f104ef5b9b28f613500efdfb1ef63ac2945bfd39e83b88901ff6656eace7268f1482407d4ce7ad67695b0534d6c9336925ab7d296571bb94cac3bb5b46dc2b4dab4ca8c249870737c09f2eac721c9cbfc10818019210b6d50fe4798fd85afaf7018524d5fc7dc58a722aac57c67a5d390290d7a6b5e2349272", 0xf8, 0x4000800, &(0x7f00000007c0)={0x11, 0x18, r2, 0x1, 0x5, 0x6, @random="0e2668fb1f6b"}, 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:39:03 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r2 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r1}) r3 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r2}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x8000000) syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:03 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000840)=0x9de) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:39:04 executing program 7: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2}, &(0x7f0000000080)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:04 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:04 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r2 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r1}) r3 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r2}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x8000000) syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) [ 183.730902] Bluetooth: hci7: command 0x0406 tx timeout [ 183.731941] Bluetooth: hci3: command 0x0406 tx timeout [ 183.733489] Bluetooth: hci6: command 0x0406 tx timeout [ 183.734372] Bluetooth: hci4: command 0x0406 tx timeout [ 183.736086] Bluetooth: hci5: command 0x0406 tx timeout 00:39:11 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:11 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r1 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r2 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r1}) r3 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r2}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r3, 0x8000000) syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:11 executing program 5: socket(0x0, 0x0, 0x80) 00:39:11 executing program 7: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000040)={@private2}, &(0x7f0000000080)=0x14) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:11 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:39:11 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = pidfd_getfd(r0, r0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r7, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:39:11 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:39:11 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) inotify_init1(0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r4) 00:39:11 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:11 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:11 executing program 7: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:12 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) inotify_init1(0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r3) 00:39:12 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) [ 191.022179] [ 191.022521] ===================================== [ 191.023263] WARNING: bad unlock balance detected! [ 191.024024] 6.19.0-rc5-next-20260116 #1 Not tainted [ 191.024787] ------------------------------------- [ 191.025513] syz-executor.4/4677 is trying to release lock (rcu_read_lock) at: [ 191.026612] [] __wait_on_freeing_inode+0x105/0x350 [ 191.028363] but there are no more locks to release! [ 191.029487] [ 191.029487] other info that might help us debug this: [ 191.031102] 4 locks held by syz-executor.4/4677: [ 191.032142] #0: ffff88800f9503f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 191.034064] #1: ffff88801b7216f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 191.036224] #2: ffff88800f954950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 191.038204] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 191.040730] [ 191.040730] stack backtrace: [ 191.041803] CPU: 0 UID: 0 PID: 4677 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 191.041832] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 191.041845] Call Trace: [ 191.041853] [ 191.041861] dump_stack_lvl+0xca/0x120 [ 191.041904] ? __wait_on_freeing_inode+0x105/0x350 [ 191.041932] print_unlock_imbalance_bug+0x118/0x130 [ 191.041961] ? __wait_on_freeing_inode+0x105/0x350 [ 191.041989] lock_release+0x1ee/0x270 [ 191.042017] __wait_on_freeing_inode+0x10a/0x350 [ 191.042046] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 191.042077] ? __pfx_var_wake_function+0x10/0x10 [ 191.042110] ? lock_is_held_type+0x9e/0x120 [ 191.042132] insert_inode_locked+0x25f/0x890 [ 191.042165] __ext4_new_inode+0x223d/0x4cd0 [ 191.042197] ? __pfx___ext4_new_inode+0x10/0x10 [ 191.042225] ? __pfx___dquot_initialize+0x10/0x10 [ 191.042260] ? __pfx_avc_has_perm+0x10/0x10 [ 191.042289] ext4_symlink+0x623/0xb40 [ 191.042325] ? __pfx_ext4_symlink+0x10/0x10 [ 191.042356] ? security_inode_permission+0x72/0xe0 [ 191.042381] vfs_symlink+0x44b/0x840 [ 191.042413] filename_symlinkat+0x158/0x440 [ 191.042440] ? __pfx_filename_symlinkat+0x10/0x10 [ 191.042467] ? strncpy_from_user+0x21b/0x2f0 [ 191.042500] __x64_sys_symlink+0x82/0x110 [ 191.042528] do_syscall_64+0xbf/0x420 [ 191.042565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.042589] RIP: 0033:0x7f3ed5d2f427 [ 191.042606] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.042627] RSP: 002b:00007ffe077c2d78 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 191.042649] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ed5d2f427 [ 191.042664] RDX: 00007ffe077c2e57 RSI: 00007f3ed5d8a019 RDI: 00007ffe077c2e40 [ 191.042678] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe077c2c10 [ 191.042692] R10: 00007ffe077c2ac7 R11: 0000000000000206 R12: 0000000000000001 [ 191.042705] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe077c2e40 [ 191.042726] [ 191.074669] ------------[ cut here ]------------ [ 191.077518] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#0: syz-executor.4/4677 [ 191.079281] Modules linked in: [ 191.079873] CPU: 0 UID: 0 PID: 4677 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 191.081495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 191.082908] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 191.083898] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 191.086743] RSP: 0018:ffff88801931f9a0 EFLAGS: 00010286 [ 191.087638] RAX: 00000000ffffffff RBX: ffff88804b3e8000 RCX: ffffffff815660f7 [ 191.088868] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88804b3e83fc [ 191.090032] RBP: ffff88804b3e8000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 191.091210] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88804b3e8000 [ 191.092384] R13: 0000000000000001 R14: ffffffff85c104e0 R15: ffff8880300c45d0 [ 191.093559] FS: 000055559063f400(0000) GS:ffff8880e5342000(0000) knlGS:0000000000000000 [ 191.094880] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 191.095852] CR2: 00007f3ed5daf544 CR3: 000000000d1ea000 CR4: 0000000000350ef0 [ 191.097026] Call Trace: [ 191.097491] [ 191.098969] __wait_on_freeing_inode+0x10f/0x350 [ 191.100346] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 191.102529] ? __pfx_var_wake_function+0x10/0x10 [ 191.105094] ? lock_is_held_type+0x9e/0x120 [ 191.107372] insert_inode_locked+0x25f/0x890 [ 191.110672] __ext4_new_inode+0x223d/0x4cd0 [ 191.115736] ? __pfx___ext4_new_inode+0x10/0x10 [ 191.118277] ? __pfx___dquot_initialize+0x10/0x10 [ 191.119912] ? __pfx_avc_has_perm+0x10/0x10 [ 191.123487] ext4_symlink+0x623/0xb40 [ 191.128165] ? __pfx_ext4_symlink+0x10/0x10 [ 191.130220] ? security_inode_permission+0x72/0xe0 [ 191.133577] vfs_symlink+0x44b/0x840 [ 191.136312] filename_symlinkat+0x158/0x440 [ 191.138609] ? __pfx_filename_symlinkat+0x10/0x10 [ 191.140202] ? strncpy_from_user+0x21b/0x2f0 [ 191.149107] __x64_sys_symlink+0x82/0x110 [ 191.150589] do_syscall_64+0xbf/0x420 [ 191.152261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.153327] RIP: 0033:0x7f3ed5d2f427 [ 191.154123] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 191.156992] RSP: 002b:00007ffe077c2d78 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 191.158234] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ed5d2f427 [ 191.159421] RDX: 00007ffe077c2e57 RSI: 00007f3ed5d8a019 RDI: 00007ffe077c2e40 [ 191.160629] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffe077c2c10 [ 191.161890] R10: 00007ffe077c2ac7 R11: 0000000000000206 R12: 0000000000000001 [ 191.163080] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe077c2e40 [ 191.168409] [ 191.168884] irq event stamp: 203 [ 191.169438] hardirqs last enabled at (203): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 191.171108] hardirqs last disabled at (202): [] _raw_spin_lock_irqsave+0x53/0x60 [ 191.172702] softirqs last enabled at (198): [] kernel_fpu_end+0x59/0x70 [ 191.174301] softirqs last disabled at (196): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 191.175930] ---[ end trace 0000000000000000 ]--- 00:39:12 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) r4 = syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, r4, 0x8000000) syz_io_uring_submit(r1, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:12 executing program 7: rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:12 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:39:12 executing program 5: socket(0x0, 0x2daa30d61cb1afd0, 0x0) 00:39:12 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:39:19 executing program 7: rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:19 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'syztnl1\x00', r1, 0x29, 0x6, 0x4, 0x1d, 0x5c, @ipv4={'\x00', '\xff\xff', @remote}, @local, 0x0, 0x8, 0x2, 0x6}}) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:39:19 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) inotify_init1(0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r3) 00:39:19 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:19 executing program 5: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:19 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:39:19 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:39:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r5, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r5, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:19 executing program 7: rt_sigtimedwait(&(0x7f0000000b80)={[0x3]}, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x8) 00:39:19 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:39:19 executing program 4: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:19 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/freeze_filesystems', 0x482, 0x138) inotify_init1(0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r3) 00:39:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) r3 = io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) syz_io_uring_setup(0x6ee4, &(0x7f0000000200)={0x0, 0x4c35, 0x20, 0x0, 0x2ec, 0x0, r3}, &(0x7f0000e91000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000280), &(0x7f00000002c0)=0x0) r5 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r5, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:19 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x5ea24771b90e1294, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x34}}, 0x4008856) timer_gettime(0x0, &(0x7f0000000100)) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x21, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x5c}}, 0x20000800) timer_create(0x0, &(0x7f0000000280)={0x0, 0x27, 0x4}, &(0x7f00000002c0)=0x0) timer_gettime(r1, &(0x7f0000000300)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x7, 0x1ff, 0xfffffff7, {{0x38, 0x4, 0x1, 0x7, 0xe0, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @rr={0x7, 0xb, 0x85, [@local, @multicast1]}, @lsrr={0x83, 0x23, 0xd6, [@dev={0xac, 0x14, 0x14, 0x11}, @multicast2, @loopback, @loopback, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x51, 0x3, 0x8, [{@private=0xa010101, 0x6}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x80}, {@remote, 0x94c0}, {@rand_addr=0x64010100, 0x80}, {@broadcast, 0x14c6}, {@dev={0xac, 0x14, 0x14, 0x2f}}]}, @ssrr={0x89, 0x1f, 0xc8, [@rand_addr=0x64010101, @loopback, @private=0xa010101, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x41}, @local]}, @generic={0x94, 0xe, "d795ed41e069dc653d676bd7"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x9, [{@rand_addr=0x64010100, 0x3}, {@local, 0x99}, {@dev={0xac, 0x14, 0x14, 0x28}, 0xffff}]}, @generic={0x86, 0x10, "24e9eba2c2d606cfc1532b1b6b9d"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8000}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x39}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x20}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'ip6tnl0\x00', r3, 0x29, 0xaa, 0x1, 0x3, 0x2, @remote, @mcast1, 0x700, 0x20, 0x1, 0xd475}}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)=@newspdinfo={0x34, 0x24, 0x20, 0x70bd28, 0x25dfdbfc, 0x8, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000085}, 0x10000080) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x64, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000814}, 0x4000080) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000cc0), r0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x14, r6, 0x200, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x851) 00:39:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r3, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:19 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) r1 = socket(0x1d, 0x5, 0x4) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x70, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x47002dc3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xa8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x800) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:39:19 executing program 0: r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x4f}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x1) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f0000000180)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r1, 0x1, 0x6, @random="27131b0fbd81"}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0xc8167c52e7eef47b}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r0, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x50}}, 0x4040004) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, &(0x7f00000004c0)) write$hidraw(0xffffffffffffffff, &(0x7f0000000500)="7d9c9fa2437150a7b458c55143ad703ead7b1044b3c3109ff98bf476c0a7fda037fe35a787da1c61c8e1970176e3ba2bcc08a7a55e8a086b41ee2c793bc5c216b8a65c488fac986cefffc366ce78060c312ee02d988612021d23d361a81c916b8617c2e9c73b4f2e33efff139c7fa9a982e7aee3ca96d9559e5faa970706b703cb75f03e941fc072c4476ec75e24e2ea371b82235efba61083ef27350c208337727588c427773d096b693d9b4e1d8af930a54dd577", 0xb5) r4 = syz_open_dev$hidraw(&(0x7f00000005c0), 0x992, 0x4040) ioctl$HIDIOCGRDESCSIZE(r4, 0x80044801, &(0x7f0000000600)) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000700)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x10) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r5, 0x400c330d, &(0x7f0000000780)={0x381, 0xfffffc01}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x19f5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8010) 00:39:19 executing program 5: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000850}, 0x20000011) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/usb_storage', 0x88800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000100), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81420500}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x7c, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x68, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x20044044) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in6=@ipv4={""/10, ""/2, @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x76}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ISOLATION_MASK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000a40)='cpuset.mem_exclusive\x00', 0x2, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), 0xffffffffffffffff) 00:39:19 executing program 3: prctl$PR_SET_FPEXC(0xc, 0x40000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x5) socket(0x1d, 0x5, 0x4) process_madvise(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f0000000980)="c5e773b5db4c0d8b45f11b50056a5bfa29e91cbac4a976382fcbd60a9df9dfb0ff9b555cb738e8caab47b5efa02089ed789a31812515b76390158f262d8f89d272837d612a9975b0eb3863eda8a23f49f1f7ffa80d7146ae1ab91b6308fe4ef5c9c78fe2a4cdd2b75a67354e251281dc7a275cf585be2cfa26423b36931715762c58a8", 0x83}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="bfe1b5365dc75fb318e9d6fb2dbfec054bad3b976ed3894f2ddae21332a8808ddd123327b93a56299157829872727161c41fcf384c3fa871e796df10fd8194dfb19eb13166f8dbe7c036caa14cca35d2310640c584126b8c5a41c8a0c68f14628c6f4470686717e52da952e3edb5b9cfe68fce", 0x73}, {&(0x7f0000000b00)="42acb7f09a60434efdcbbb3f7d4c3761563e2937e1bd694da8c5e578a6211894f19e0ae016095bea28ede7d26b967a16ada25fb20824f6a420b8089e25526fc9ec872f69998cbff9c43005cf1be0244082363704d2c3150ca5142b7217ba76a98aae4f76e8377b4b9ceca5a93676ebc64318517ff5ca33d465b38105d0aeaff17cf1670e", 0x84}], 0x4, 0x10, 0x0) 00:39:19 executing program 6: r0 = syz_io_uring_setup(0x204e, &(0x7f0000000000)={0x0, 0x3f3b, 0x10, 0x1, 0x149}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r2 = io_uring_setup(0x1dda, &(0x7f0000000100)={0x0, 0xc7f2, 0x20, 0x0, 0x2e1, 0x0, r0}) io_uring_setup(0x257c, &(0x7f0000000180)={0x0, 0xc5fc, 0x10, 0x0, 0x7, 0x0, r2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000e3c000/0x3000)=nil, 0x3000, 0x4, 0x10, 0xffffffffffffffff, 0x8000000) r3 = syz_open_dev$hidraw(&(0x7f0000000300), 0x6, 0x100800) syz_io_uring_submit(r1, 0x0, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x0, @fd=r3, 0x8, 0x6c, 0x6, 0x0, 0x0, {0x1}}, 0xffff8000) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_setup(0x3597, &(0x7f0000000740)={0x0, 0x3, 0x4, 0x0, 0x2b2}, &(0x7f0000dec000/0x1000)=nil, &(0x7f0000f67000/0x2000)=nil, &(0x7f00000007c0), &(0x7f0000000800)) io_uring_setup(0xc65, &(0x7f00000008c0)={0x0, 0xe4fc, 0x1, 0x2, 0x27f}) 00:39:19 executing program 7: pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigtimedwait(0x0, &(0x7f0000000bc0), &(0x7f0000000c40)={0x0, 0x3938700}, 0x0) 00:39:19 executing program 1: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x4041}, 0x20004000) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2850}, 0x40400c0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/bus/clockevents', 0x101001, 0x2d) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x12000100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe4, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xd65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5fc}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x36, 0x10}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2000488c}, 0x4801) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, 0x0, 0x5, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9afc}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1f}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) inotify_init1(0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8402001}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r3) VM DIAGNOSIS: 00:39:12 Registers: info registers vcpu 0 RAX=0000000000000023 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88801931f488 R8 =0000000000000000 R9 =ffffed1001767046 R10=0000000000000023 R11=666666203a332320 R12=0000000000000023 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055559063f400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3ed5daf544 CR3=000000000d1ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff888019217b10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003242f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff888019217b48 RIP=ffffffff84d1a460 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00005555939e5400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe4900000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2ce23000 CR3=000000000df25000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000