Warning: Permanently added '[localhost]:59979' (ECDSA) to the list of known hosts.
2022/10/03 09:43:34 fuzzer started
2022/10/03 09:43:35 dialing manager at localhost:35095
syzkaller login: [   40.997401] cgroup: Unknown subsys name 'net'
[   41.079613] cgroup: Unknown subsys name 'rlimit'
2022/10/03 09:43:50 syscalls: 225
2022/10/03 09:43:50 code coverage: enabled
2022/10/03 09:43:50 comparison tracing: enabled
2022/10/03 09:43:50 extra coverage: enabled
2022/10/03 09:43:50 setuid sandbox: enabled
2022/10/03 09:43:50 namespace sandbox: enabled
2022/10/03 09:43:50 Android sandbox: enabled
2022/10/03 09:43:50 fault injection: enabled
2022/10/03 09:43:50 leak checking: enabled
2022/10/03 09:43:50 net packet injection: enabled
2022/10/03 09:43:50 net device setup: enabled
2022/10/03 09:43:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2022/10/03 09:43:50 devlink PCI setup: PCI device 0000:00:10.0 is not available
2022/10/03 09:43:50 USB emulation: enabled
2022/10/03 09:43:50 hci packet injection: enabled
2022/10/03 09:43:50 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930������������������������������������������)
2022/10/03 09:43:50 802.15.4 emulation: enabled
2022/10/03 09:43:50 fetching corpus: 0, signal 0/0 (executing program)
2022/10/03 09:43:51 starting 8 fuzzer processes
09:43:51 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0xffffffffffffff6d, 0x10000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={r0, 0x3, 0xffffffffffffffff, 0x401})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x4, 0x9, 0x3, 0x3}, {0x6, 0x42, 0x3, 0x7ff}, {0x4, 0x0, 0x6, 0x7}, {0x1c6e, 0x0, 0x7}, {0x8e7, 0x3f, 0x9, 0x6}, {0x5, 0x1, 0x6, 0x3f}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x7a69c9650f8f836d)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={r0, 0x1, r4, 0xfffffff9, 0x80000})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000082)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8803}, 0x800)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4048841)

09:43:51 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:43:51 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x40)

09:43:51 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
r1 = getgid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)={0x51, 0x7d, 0x2, {{0x0, 0x3b, 0xff, 0x2, {0x1, 0x4, 0x3}, 0x4040000, 0x400, 0x101, 0x3, 0x2, '(%', 0x1, '!', 0x0, '', 0x5, '/,,\\&'}, 0x1, '!', 0xee00, r1, 0xffffffffffffffff}}, 0x51)
r2 = semget(0x3, 0x2, 0x400)
semctl$IPC_RMID(r2, 0x0, 0x0)

09:43:51 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', <r1=>0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r4=>r3, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', <r5=>0x0})
r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r7=>r5, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r8=>r4, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r9, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r9, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r12=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x134, r11, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10000004)

09:43:51 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

[   56.889409] audit: type=1400 audit(1664790231.574:6): avc:  denied  { execmem } for  pid=285 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1
09:43:51 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00'})
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000013c0)=""/181)

09:43:51 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r5=>r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r6=>0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r7 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
geteuid()
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r9, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd354}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

[   58.240724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   58.257449] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   58.265246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   58.271981] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   58.273945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   58.279178] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   58.281715] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   58.307313] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   58.308682] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   58.310518] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   58.312423] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   58.313451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   58.314782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   58.316568] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   58.319458] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   58.321896] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   58.324596] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   58.325808] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   58.327265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   58.328381] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   58.329514] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   58.329616] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   58.331783] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   58.334239] Bluetooth: hci1: HCI_REQ-0x0c1a
[   58.335403] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   58.338454] Bluetooth: hci4: HCI_REQ-0x0c1a
[   58.340286] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   58.350925] Bluetooth: hci5: HCI_REQ-0x0c1a
[   58.366502] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   58.368480] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   58.372421] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   58.373901] Bluetooth: hci0: HCI_REQ-0x0c1a
[   58.383096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   58.383395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[   58.392249] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[   58.393779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[   58.395947] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   58.398475] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   58.399571] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   58.400541] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[   58.401545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[   58.403191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   58.403539] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[   58.411997] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   58.413469] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[   58.414438] Bluetooth: hci2: HCI_REQ-0x0c1a
[   58.422397] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[   58.422975] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   58.425032] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[   58.425507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   58.427093] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[   58.428523] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[   58.429761] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[   58.434799] Bluetooth: hci3: HCI_REQ-0x0c1a
[   58.448525] Bluetooth: hci7: HCI_REQ-0x0c1a
[   58.451731] Bluetooth: hci6: HCI_REQ-0x0c1a
[   60.386481] Bluetooth: hci5: command 0x0409 tx timeout
[   60.387386] Bluetooth: hci4: command 0x0409 tx timeout
[   60.387967] Bluetooth: hci1: command 0x0409 tx timeout
[   60.450321] Bluetooth: hci3: command 0x0409 tx timeout
[   60.451204] Bluetooth: hci2: command 0x0409 tx timeout
[   60.451795] Bluetooth: hci0: command 0x0409 tx timeout
[   60.514220] Bluetooth: hci6: command 0x0409 tx timeout
[   60.514873] Bluetooth: hci7: command 0x0409 tx timeout
[   62.434241] Bluetooth: hci1: command 0x041b tx timeout
[   62.434705] Bluetooth: hci4: command 0x041b tx timeout
[   62.435097] Bluetooth: hci5: command 0x041b tx timeout
[   62.498219] Bluetooth: hci0: command 0x041b tx timeout
[   62.498688] Bluetooth: hci2: command 0x041b tx timeout
[   62.499079] Bluetooth: hci3: command 0x041b tx timeout
[   62.562256] Bluetooth: hci7: command 0x041b tx timeout
[   62.562728] Bluetooth: hci6: command 0x041b tx timeout
[   64.482266] Bluetooth: hci5: command 0x040f tx timeout
[   64.482705] Bluetooth: hci4: command 0x040f tx timeout
[   64.483074] Bluetooth: hci1: command 0x040f tx timeout
[   64.546196] Bluetooth: hci3: command 0x040f tx timeout
[   64.546615] Bluetooth: hci2: command 0x040f tx timeout
[   64.546972] Bluetooth: hci0: command 0x040f tx timeout
[   64.610228] Bluetooth: hci6: command 0x040f tx timeout
[   64.610636] Bluetooth: hci7: command 0x040f tx timeout
[   66.530252] Bluetooth: hci1: command 0x0419 tx timeout
[   66.530715] Bluetooth: hci4: command 0x0419 tx timeout
[   66.531107] Bluetooth: hci5: command 0x0419 tx timeout
[   66.594188] Bluetooth: hci0: command 0x0419 tx timeout
[   66.594622] Bluetooth: hci2: command 0x0419 tx timeout
[   66.595030] Bluetooth: hci3: command 0x0419 tx timeout
[   66.658246] Bluetooth: hci7: command 0x0419 tx timeout
[   66.658688] Bluetooth: hci6: command 0x0419 tx timeout
09:44:47 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r5=>r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r6=>0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r7 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
geteuid()
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r9, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd354}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:44:47 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r5=>r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r6=>0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r7 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
geteuid()
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r9, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd354}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:44:47 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:44:47 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', <r1=>0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r4=>r3, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', <r5=>0x0})
r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r7=>r5, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r8=>r4, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r9, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r9, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r12=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x134, r11, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10000004)

09:44:47 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:44:47 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', <r5=>r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', <r6=>0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r7 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r9, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
geteuid()
sendmsg$BATADV_CMD_SET_VLAN(r8, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x4c, r9, 0x0, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x11}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x78}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xd354}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:44:48 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000880), r2)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r7, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:44:48 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
geteuid()
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:06 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00'})
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000013c0)=""/181)

09:45:06 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0xffffffffffffff6d, 0x10000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={r0, 0x3, 0xffffffffffffffff, 0x401})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x4, 0x9, 0x3, 0x3}, {0x6, 0x42, 0x3, 0x7ff}, {0x4, 0x0, 0x6, 0x7}, {0x1c6e, 0x0, 0x7}, {0x8e7, 0x3f, 0x9, 0x6}, {0x5, 0x1, 0x6, 0x3f}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x7a69c9650f8f836d)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={r0, 0x1, r4, 0xfffffff9, 0x80000})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000082)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8803}, 0x800)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4048841)

09:45:06 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x40)

09:45:06 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', <r1=>0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r4=>r3, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', <r5=>0x0})
r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r7=>r5, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r8=>r4, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r9, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r9, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r12=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x134, r11, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10000004)

09:45:06 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:06 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
sendmsg$BATADV_CMD_GET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, r7, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x11)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:06 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
r1 = getgid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)={0x51, 0x7d, 0x2, {{0x0, 0x3b, 0xff, 0x2, {0x1, 0x4, 0x3}, 0x4040000, 0x400, 0x101, 0x3, 0x2, '(%', 0x1, '!', 0x0, '', 0x5, '/,,\\&'}, 0x1, '!', 0xee00, r1, 0xffffffffffffffff}}, 0x51)
r2 = semget(0x3, 0x2, 0x400)
semctl$IPC_RMID(r2, 0x0, 0x0)

09:45:06 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:06 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
r1 = getgid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)={0x51, 0x7d, 0x2, {{0x0, 0x3b, 0xff, 0x2, {0x1, 0x4, 0x3}, 0x4040000, 0x400, 0x101, 0x3, 0x2, '(%', 0x1, '!', 0x0, '', 0x5, '/,,\\&'}, 0x1, '!', 0xee00, r1, 0xffffffffffffffff}}, 0x51)
r2 = semget(0x3, 0x2, 0x400)
semctl$IPC_RMID(r2, 0x0, 0x0)

09:45:06 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x40)

09:45:06 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:06 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
r1 = getgid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)={0x51, 0x7d, 0x2, {{0x0, 0x3b, 0xff, 0x2, {0x1, 0x4, 0x3}, 0x4040000, 0x400, 0x101, 0x3, 0x2, '(%', 0x1, '!', 0x0, '', 0x5, '/,,\\&'}, 0x1, '!', 0xee00, r1, 0xffffffffffffffff}}, 0x51)
r2 = semget(0x3, 0x2, 0x400)
semctl$IPC_RMID(r2, 0x0, 0x0)

09:45:06 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:06 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:18 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0xffffffffffffff6d, 0x10000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={r0, 0x3, 0xffffffffffffffff, 0x401})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x4, 0x9, 0x3, 0x3}, {0x6, 0x42, 0x3, 0x7ff}, {0x4, 0x0, 0x6, 0x7}, {0x1c6e, 0x0, 0x7}, {0x8e7, 0x3f, 0x9, 0x6}, {0x5, 0x1, 0x6, 0x3f}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x7a69c9650f8f836d)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={r0, 0x1, r4, 0xfffffff9, 0x80000})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000082)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8803}, 0x800)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4048841)

09:45:18 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', <r1=>0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r4=>r3, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000200)={'wg1\x00', <r5=>0x0})
r6 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r7=>r5, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r8=>r4, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r9, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r9, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'batadv0\x00', <r12=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x134, r11, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10000004)

09:45:18 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:18 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x40)

09:45:18 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
r1 = getgid()
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000800)={0x51, 0x7d, 0x2, {{0x0, 0x3b, 0xff, 0x2, {0x1, 0x4, 0x3}, 0x4040000, 0x400, 0x101, 0x3, 0x2, '(%', 0x1, '!', 0x0, '', 0x5, '/,,\\&'}, 0x1, '!', 0xee00, r1, 0xffffffffffffffff}}, 0x51)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:18 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
socket$nl_generic(0x10, 0x3, 0x10)
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:18 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:18 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00'})
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000013c0)=""/181)

09:45:18 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
getgid()
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:18 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:18 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:18 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r2 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r2, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r4, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
r5 = syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', r1, 0x29, 0x3, 0x8, 0xe1aa, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0x1eb, 0x8000}})
accept4$packet(r4, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:18 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000680))
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:18 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:32 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0xffffffffffffff6d, 0x10000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={r0, 0x3, 0xffffffffffffffff, 0x401})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x4, 0x9, 0x3, 0x3}, {0x6, 0x42, 0x3, 0x7ff}, {0x4, 0x0, 0x6, 0x7}, {0x1c6e, 0x0, 0x7}, {0x8e7, 0x3f, 0x9, 0x6}, {0x5, 0x1, 0x6, 0x3f}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x7a69c9650f8f836d)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={r0, 0x1, r4, 0xfffffff9, 0x80000})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000082)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8803}, 0x800)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x20, 0x0, 0x9, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4048841)

09:45:32 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r3=>r2, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', <r4=>0x0})
r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r6=>r4, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r7=>r3, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r8, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r8, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000b80))

09:45:32 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00'})
semctl$IPC_INFO(0x0, 0x4, 0x3, &(0x7f00000013c0)=""/181)

09:45:32 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
syz_open_procfs(0x0, &(0x7f0000000700)='smaps_rollup\x00')
accept4$packet(r3, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:32 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000640)={0x7, 0x7f, 0x1}, 0x7)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:32 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:32 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:32 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:44 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0xffffffffffffff6d, 0x10000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={r0, 0x3, 0xffffffffffffffff, 0x401})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x4, 0x9, 0x3, 0x3}, {0x6, 0x42, 0x3, 0x7ff}, {0x4, 0x0, 0x6, 0x7}, {0x1c6e, 0x0, 0x7}, {0x8e7, 0x3f, 0x9, 0x6}, {0x5, 0x1, 0x6, 0x3f}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x7a69c9650f8f836d)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={r0, 0x1, r4, 0xfffffff9, 0x80000})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000082)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8803}, 0x800)

09:45:44 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
syz_io_uring_submit(r6, r3, &(0x7f0000000540)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {0x160e}, 0x1}, 0x5)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:44 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$SEM_STAT(0xffffffffffffffff, 0x1, 0x12, &(0x7f00000005c0)=""/110)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:44 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r3=>r2, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', <r4=>0x0})
r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r6=>r4, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r7=>r3, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r8, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r8, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)

09:45:44 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
semget$private(0x0, 0x4, 0x33)
accept4$packet(r3, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:44 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x7, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x24008841)
sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:44 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00'})

09:45:44 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
write$P9_RSTAT(r0, &(0x7f00000017c0)={0x5f, 0x7d, 0x1, {0x0, 0x58, 0x3, 0x21a, {0x4, 0x1, 0x4}, 0x90000000, 0x7, 0x9, 0x8, 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0x9, 'loginuid\x00', 0xa, 'net/icmp6\x00'}}, 0x5f)
getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:45 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x40010, r4, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:45 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:45 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x9c, 0xb, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xe013}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20004004}, 0x4000800)
accept4$packet(r3, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:45 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$GETVAL(0x0, 0x3, 0xc, &(0x7f0000000580))
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:45 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:45 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000500)=0x3, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:45 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f0000000540)=""/10)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:45 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001380)={'batadv_slave_1\x00'})

09:45:56 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700)={<r7=>0x0})
r8 = epoll_create(0x8)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001780)={r7, 0x2, r8, 0x80000000})
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:56 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
semctl$IPC_INFO(0x0, 0x3, 0x3, &(0x7f0000000480)=""/88)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:56 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x44, 0x6, 0x0, 0x2, @local, @remote, 0x7800, 0x7800, 0x8, 0x5}})
r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14, 0x80800)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r3=>r2, 0x2f, 0x9, 0x0, 0x0, 0x56, @private1, @loopback, 0x10, 0x41, 0x6, 0x1}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', <r4=>0x0})
r5 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240))
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6tnl0\x00', <r6=>r4, 0x4, 0x68, 0x7, 0x7671, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, 0x700, 0x80, 0x5, 0x3ff}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', <r7=>r3, 0x2f, 0x1, 0x1d, 0xf9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}, @loopback, 0x7, 0x7, 0x60, 0x314d}})
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x100, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4800)
write$P9_RWSTAT(r8, &(0x7f0000000600)={0x7, 0x7f, 0x1}, 0x7)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000640)={'batadv_slave_1\x00'})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000006c0)={0x21c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x5}, @CTA_EXPECT_NAT={0x24, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}]}]}, @CTA_EXPECT_MASK={0x6c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xe1f1}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x9c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40}, 0x11)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000980), 0x260201)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, 0x0, 0x5, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}]}, 0x30}}, 0x1)
write$P9_RGETLOCK(r8, &(0x7f0000000ac0)={0x2b, 0x37, 0x1, {0x0, 0xfffffffffffffc70, 0x100, 0xffffffffffffffff, 0xd, '/dev/snd/seq\x00'}}, 0x2b)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000b40), 0xffffffffffffffff)

09:45:56 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)

09:45:56 executing program 0:
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={<r0=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0xffffffffffffff6d, 0x10000})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r2, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48090)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r2, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x100}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7ff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00'})
sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, 0x1, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000500)={r0, 0x3, 0xffffffffffffffff, 0x401})
write$P9_RFLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x7, 0x6d, 0x2}, 0x7)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000005c0)={0x6, &(0x7f0000000580)=[{0x4, 0x9, 0x3, 0x3}, {0x6, 0x42, 0x3, 0x7ff}, {0x4, 0x0, 0x6, 0x7}, {0x1c6e, 0x0, 0x7}, {0x8e7, 0x3f, 0x9, 0x6}, {0x5, 0x1, 0x6, 0x3f}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000600))
write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000680)={0x7, 0x7f, 0x1}, 0x7)
sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x844000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x8, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x7a69c9650f8f836d)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000800)={r0, 0x1, r4, 0xfffffff9, 0x80000})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x20000082)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0xd, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8803}, 0x800)

09:45:56 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000440)=""/220)
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000540)=[0x4, 0x2, 0xd, 0x4])
accept4$packet(r3, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:56 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$SEM_STAT_ANY(0x0, 0x2, 0x14, &(0x7f00000004c0)=""/118)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:56 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000005c0)="0256fe6ce3b309fb59617d36f41e187d1edb6ddd5e8c696bb68c169dc5782108693b62b5df126e001e590202521095174464043e285df63dd50bc04528244b5747e14b186ae4d544a5b7e445678cc975f994647948ba251743b259fb5a7e1494e9d92659463d9724a2138ed8bbb36a1159eafa5c1a774b2f16ac8a96c719ea86a9be1983dee3615f41957a4279406220394d85884aa49718685303ed57414eb076f3c3ea25f5236902c8bfc5c8ab1fab3f3363aec646b92370388c32905541997d97cf2c63c5665d552b65eb3a72e4a83ce846ef99807aa77d0eaf85d636dc7da12911", 0xe3, r4}, 0x68)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r5, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:56 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
semctl$IPC_INFO(r1, 0x3, 0x3, &(0x7f0000000440)=""/220)
accept4$packet(r3, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:56 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = accept$packet(r4, 0x0, &(0x7f0000000400))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440))
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:56 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
accept$packet(r4, 0x0, &(0x7f0000000400))
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:56 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$SEM_STAT(0x0, 0x2, 0x12, &(0x7f0000000440)=""/116)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:56 executing program 4:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x1)
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)="ab842d48288c94c04e9a2cde4fa98785", 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f0000000140)={'tunl0\x00', <r1=>0x0, 0x10, 0x1, 0xdea8, 0x8, {{0x17, 0x4, 0x1, 0x7, 0x5c, 0x64, 0x0, 0x8, 0x4, 0x0, @loopback, @private=0xa010101, {[@noop, @lsrr={0x83, 0x7, 0x6b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @generic={0x44, 0xa, "f83c344e688a2da1"}, @ssrr={0x89, 0x23, 0x66, [@multicast1, @multicast2, @rand_addr=0x64010101, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x14}, @loopback]}, @end, @timestamp={0x44, 0x10, 0x16, 0x0, 0xd, [0x9, 0x6, 0xb7fad3dc]}]}}}}})
setsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000200)="f5b4445570a95bcff198f167652b0f03a847f75cbfbad893049a7bd6be06790c0030edc1610e4d32e03b23945c16119522694fa702ce949c60b79ef02de071e64a160d4620fdbefbf057b104d36a0e230d9ccd461e66273a966a753f0ae479521f50a15129934c4628e33700b6d5b2b8796cd5d2c25ccf145fb63a5b7cbb894339b24950298013744baf14454844926c19cb3ef855a8b4af7b6937c0378ba647e61bd758eaaf5251ef898964cfa5f3305687fecc2fb4e9b1d77e9d765aa6f48eab8bde17fa47c53e96aa270c43c813883948f2f1", 0xd4)
keyctl$revoke(0x3, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/sockstat6\x00')
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000480), 0x4)
keyctl$describe(0x6, 0x0, &(0x7f00000004c0)=""/183, 0xb7)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
accept$inet6(r3, 0x0, &(0x7f0000000580))
socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x31}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4)

09:45:56 executing program 6:
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x4, 0x1c, 0x1, 0x8001, 0x8, @local, @private0, 0x40, 0x700, 0x8, 0x7}})
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r1 = semget(0x1, 0x1, 0x121)
socketpair(0x9ef07cf33035252f, 0xa, 0xf9, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6_vti0\x00', r0, 0x2f, 0x6, 0x65, 0x9, 0x30, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x20, 0x40, 0x9}})
semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x330, 0x4])
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x8000, 0x80, 0x2, 0xfffff7a4, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x68, 0x0, 0x3f, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp={0x44, 0x1c, 0xfa, 0x0, 0x6, [0x3ff, 0x9, 0x1, 0xa6da, 0x2, 0x5]}, @ssrr={0x89, 0xb, 0x6e, [@remote, @loopback]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008081}, 0x20004800)
accept4$packet(r3, 0x0, &(0x7f0000000ac0), 0x80000)

09:45:56 executing program 7:
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00')
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={r1, 0x2, 0xffffffffffffffff, 0x8, 0x80000})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000100)=r1)
setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xa5, 0x7fc3, 0x6}, 0xc)
write$P9_RFSYNC(r0, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x0, &(0x7f00000001c0)})
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000240)=r1)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='loginuid\x00')
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/73, 0x49, 0x1, &(0x7f0000000340)=""/191, 0xbf}, &(0x7f0000000440)=0x40)
socketpair(0x29, 0x80000, 0x5, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001580)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, &(0x7f00000014c0)=""/170, 0xaa}, &(0x7f00000015c0)=0x40)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000001640)={0x5, &(0x7f0000001600)=[{0x1, 0x3f, 0x90, 0x6}, {0x4, 0x1f, 0x81, 0x4}, {0x0, 0x1, 0x2, 0x5}, {0x2, 0x6, 0x7, 0x4}, {0x9, 0x2, 0x7f, 0x1ff}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000016c0)={0x4, &(0x7f0000001680)=[{0x4, 0x4, 0x7, 0xb66}, {0x8000, 0x20, 0x1, 0x5}, {0x238, 0x9, 0x5, 0x79a}, {0x2, 0x1, 0x81, 0x2}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001700))
epoll_create(0x8)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000001840)=0x7, &(0x7f0000001880)=0x4)

09:45:57 executing program 5:
r0 = semget$private(0x0, 0x0, 0x8)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000000)=""/19)
semctl$GETPID(r0, 0x2, 0xb, &(0x7f0000000040)=""/52)
semctl$SEM_STAT(r0, 0x3, 0x12, &(0x7f0000000080)=""/75)
semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000100)=""/204)
r1 = semget(0x3, 0x1, 0x84)
semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000200)=""/56)
r2 = semget(0x0, 0x0, 0x2a1)
semctl$SETVAL(r2, 0x2, 0x10, &(0x7f0000000240)=0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x3, 0x81, 0x1, 'queue0\x00', 0x5})
r3 = semget(0x0, 0x1, 0x0)
semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000340)=""/4096)
r4 = semget$private(0x0, 0x2, 0x504)
semctl$IPC_RMID(r4, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001340), 0xffffffffffffffff)
semctl$IPC_RMID(r3, 0x0, 0x0)
semctl$IPC_RMID(r4, 0x0, 0x0)

09:45:57 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
semtimedop(0xffffffffffffffff, &(0x7f0000000380)=[{0x3, 0x1}, {0x0, 0x7, 0x1000}, {0x3, 0x6, 0x1000}, {0x4, 0x100, 0x1000}, {0x1, 0x1f, 0x800}], 0x5, &(0x7f00000003c0)={0x0, 0x3938700})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

09:45:57 executing program 2:
semop(0x0, &(0x7f0000000000)=[{0x2}, {0x4, 0x7, 0x800}, {0x0, 0x7, 0x1800}, {0x3, 0x40, 0x1000}, {0xaea355966659ee65, 0x2, 0x800}, {0x2, 0x200, 0x1000}, {0x4, 0xe0d, 0x2000}, {0x7, 0x9, 0x2800}, {0x1, 0x1}], 0x9)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0x10, 0x7ff}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6})
r0 = getgid()
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xee00, 0x2, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000})
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000140)={{0x3, 0x0, r0, 0xee01, r0, 0x0, 0x8}, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7})
write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000001c0)={0x4c, 0x7d, 0x1, {{0x0, 0x36, 0x2, 0x10000, {0x1, 0x2, 0x7}, 0x280000, 0x42e, 0x8000, 0x8000, 0x1, '\f', 0x1, ',', 0x0, '', 0x1, '\x8c'}, 0x1, '!', 0xee00, r0}}, 0x4c)
semctl$GETNCNT(0x0, 0x2, 0xe, &(0x7f0000000240)=""/211)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000340)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x0, 0x8d, {0x10, 0x1, 0x5}, 0x1200000, 0xf912, 0x8, 0x2, 0x1, '!', 0x1, '\x8c', 0x3, ':]]', 0x1, '\x8c'}, 0x1, ',', 0xee01, r0, 0xee01}}, 0x4f)
write$P9_RSTAT(0xffffffffffffffff, &(0x7f00000003c0)={0x46, 0x7d, 0x1, {0x0, 0x3f, 0x1, 0xfffffffc, {0x10, 0x3, 0x2}, 0x4380000, 0x0, 0x8, 0x0, 0x6, '@\xf1--.\xbd', 0x1, '\x8c', 0x3, '!\x1c%', 0x2, '.\xf2'}}, 0x46)
semctl$IPC_RMID(0x0, 0x0, 0x0)

09:45:57 executing program 1:
clock_gettime(0x0, &(0x7f0000000000)={<r0=>0x0, <r1=>0x0})
write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{0x77359400}, 0x1f, 0x4, 0x3}, {{}, 0x2, 0x7fff}, {{r0, r1/1000+60000}, 0x3, 0x9, 0x6}], 0x48)
clock_gettime(0x7, &(0x7f00000000c0))
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x3, 0x3}, 0x6)
r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, 0x10010, 0xffffffffffffffff, 0x8000000)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x200000c, 0x10, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x41, 0x20002, 0x12345}, 0x6)
setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000001c0)={{0xa, 0x4e24, 0x8001, @empty, 0x3c2}, {0xa, 0x4e22, 0x7, @mcast1, 0xd9}, 0x6, [0x401, 0x80000001, 0x567a1128, 0x3, 0xfffffff7, 0x1ff, 0x8000, 0x8]}, 0x5c)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip_tables_targets\x00')
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x4, 0x8, 0xb04, 0x0, 0x0, {0xc, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}]}, 0x1c}}, 0x20000014)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80)

[  183.778566] Bluetooth: hci1: command 0x0406 tx timeout
[  183.779566] Bluetooth: hci4: command 0x0406 tx timeout
[  183.780467] Bluetooth: hci3: command 0x0406 tx timeout
[  183.781340] Bluetooth: hci5: command 0x0406 tx timeout
[  183.782242] Bluetooth: hci7: command 0x0406 tx timeout
[  183.783097] Bluetooth: hci0: command 0x0406 tx timeout
[  183.783981] Bluetooth: hci6: command 0x0406 tx timeout
[  183.784860] Bluetooth: hci2: command 0x0406 tx timeout
[  184.290181] INFO: task rcu_gp:3 blocked for more than 143 seconds.
[  184.291228]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.291937] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.292988] task:rcu_gp          state:I stack:30328 pid:3     ppid:2      flags:0x00004000
[  184.294145] Call Trace:
[  184.294705]  <TASK>
[  184.295171]  __schedule+0x893/0x2470
[  184.295939]  ? io_schedule_timeout+0x150/0x150
[  184.296936]  ? do_raw_spin_lock+0x121/0x260
[  184.297566]  ? rwlock_bug.part.0+0x90/0x90
[  184.298212]  schedule+0xda/0x1b0
[  184.298688]  rescuer_thread+0x851/0xdb0
[  184.299269]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.299933]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.300637]  ? lockdep_hardirqs_on+0x79/0x100
[  184.301302]  ? worker_thread+0x1260/0x1260
[  184.301913]  kthread+0x2ed/0x3a0
[  184.302427]  ? kthread_complete_and_exit+0x40/0x40
[  184.303146]  ret_from_fork+0x22/0x30
[  184.303695]  </TASK>
[  184.304020] INFO: task rcu_par_gp:4 blocked for more than 143 seconds.
[  184.304929]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.305692] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.306753] task:rcu_par_gp      state:I stack:30944 pid:4     ppid:2      flags:0x00004000
[  184.307915] Call Trace:
[  184.308302]  <TASK>
[  184.308626]  __schedule+0x893/0x2470
[  184.309206]  ? io_schedule_timeout+0x150/0x150
[  184.309857]  ? do_raw_spin_lock+0x121/0x260
[  184.310495]  ? rwlock_bug.part.0+0x90/0x90
[  184.311101]  schedule+0xda/0x1b0
[  184.311620]  rescuer_thread+0x851/0xdb0
[  184.312218]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.312914]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.313635]  ? lockdep_hardirqs_on+0x79/0x100
[  184.314312]  ? worker_thread+0x1260/0x1260
[  184.314904]  kthread+0x2ed/0x3a0
[  184.315417]  ? kthread_complete_and_exit+0x40/0x40
[  184.316099]  ret_from_fork+0x22/0x30
[  184.316675]  </TASK>
[  184.317005] INFO: task slub_flushwq:5 blocked for more than 143 seconds.
[  184.317938]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.318687] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.319739] task:slub_flushwq    state:I stack:30944 pid:5     ppid:2      flags:0x00004000
[  184.320887] Call Trace:
[  184.321276]  <TASK>
[  184.321600]  __schedule+0x893/0x2470
[  184.322200]  ? io_schedule_timeout+0x150/0x150
[  184.322846]  ? do_raw_spin_lock+0x121/0x260
[  184.323488]  ? rwlock_bug.part.0+0x90/0x90
[  184.324086]  schedule+0xda/0x1b0
[  184.324611]  rescuer_thread+0x851/0xdb0
[  184.325214]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.325917]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.326640]  ? lockdep_hardirqs_on+0x79/0x100
[  184.327312]  ? worker_thread+0x1260/0x1260
[  184.327907]  kthread+0x2ed/0x3a0
[  184.328421]  ? kthread_complete_and_exit+0x40/0x40
[  184.329144]  ret_from_fork+0x22/0x30
[  184.329713]  </TASK>
[  184.330042] INFO: task netns:6 blocked for more than 143 seconds.
[  184.330896]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.331642] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.332706] task:netns           state:I stack:30944 pid:6     ppid:2      flags:0x00004000
[  184.333876] Call Trace:
[  184.334272]  <TASK>
[  184.334598]  __schedule+0x893/0x2470
[  184.335155]  ? io_schedule_timeout+0x150/0x150
[  184.335796]  ? do_raw_spin_lock+0x121/0x260
[  184.336432]  ? rwlock_bug.part.0+0x90/0x90
[  184.337032]  schedule+0xda/0x1b0
[  184.337554]  rescuer_thread+0x851/0xdb0
[  184.338164]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.338862]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.339587]  ? lockdep_hardirqs_on+0x79/0x100
[  184.340257]  ? worker_thread+0x1260/0x1260
[  184.340855]  kthread+0x2ed/0x3a0
[  184.341371]  ? kthread_complete_and_exit+0x40/0x40
[  184.342080]  ret_from_fork+0x22/0x30
[  184.342661]  </TASK>
[  184.342994] INFO: task kworker/0:0H:8 blocked for more than 143 seconds.
[  184.343920]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.344674] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.345739] task:kworker/0:0H    state:I stack:29464 pid:8     ppid:2      flags:0x00004000
[  184.346893] Workqueue:  0x0 (kblockd)
[  184.347466] Call Trace:
[  184.347827]  <TASK>
[  184.348190]  __schedule+0x893/0x2470
[  184.348725]  ? io_schedule_timeout+0x150/0x150
[  184.349415]  schedule+0xda/0x1b0
[  184.349919]  worker_thread+0x15f/0x1260
[  184.350538]  ? process_one_work+0x16a0/0x16a0
[  184.351204]  kthread+0x2ed/0x3a0
[  184.351685]  ? kthread_complete_and_exit+0x40/0x40
[  184.352408]  ret_from_fork+0x22/0x30
[  184.352960]  </TASK>
[  184.353322] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds.
[  184.354259]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.354982] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.356042] task:mm_percpu_wq    state:I stack:30944 pid:10    ppid:2      flags:0x00004000
[  184.357176] Call Trace:
[  184.357533]  <TASK>
[  184.357867]  __schedule+0x893/0x2470
[  184.358438]  ? io_schedule_timeout+0x150/0x150
[  184.359078]  ? do_raw_spin_lock+0x121/0x260
[  184.359722]  ? rwlock_bug.part.0+0x90/0x90
[  184.360358]  schedule+0xda/0x1b0
[  184.360847]  rescuer_thread+0x851/0xdb0
[  184.361449]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.362202]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.362892]  ? lockdep_hardirqs_on+0x79/0x100
[  184.363560]  ? worker_thread+0x1260/0x1260
[  184.364206]  kthread+0x2ed/0x3a0
[  184.364697]  ? kthread_complete_and_exit+0x40/0x40
[  184.365415]  ret_from_fork+0x22/0x30
[  184.365968]  </TASK>
[  184.366331] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds.
[  184.367304]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.368024] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.369072] task:rcu_tasks_kthre state:I stack:29272 pid:11    ppid:2      flags:0x00004000
[  184.370244] Call Trace:
[  184.370603]  <TASK>
[  184.370928]  __schedule+0x893/0x2470
[  184.371498]  ? io_schedule_timeout+0x150/0x150
[  184.372185]  ? mark_held_locks+0x9e/0xe0
[  184.372760]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.373494]  schedule+0xda/0x1b0
[  184.374001]  rcu_tasks_one_gp+0x3db/0xc10
[  184.374645]  rcu_tasks_kthread+0x80/0xa0
[  184.375248]  ? rcu_tasks_postscan+0x10/0x10
[  184.375857]  kthread+0x2ed/0x3a0
[  184.376379]  ? kthread_complete_and_exit+0x40/0x40
[  184.377058]  ret_from_fork+0x22/0x30
[  184.377640]  </TASK>
[  184.377976] INFO: task kworker/1:0:20 blocked for more than 143 seconds.
[  184.378910]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.379662] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.380723] task:kworker/1:0     state:I stack:29736 pid:20    ppid:2      flags:0x00004000
[  184.381899] Workqueue:  0x0 (ata_sff)
[  184.382474] Call Trace:
[  184.382833]  <TASK>
[  184.383190]  __schedule+0x893/0x2470
[  184.383723]  ? io_schedule_timeout+0x150/0x150
[  184.384395]  ? rwlock_bug.part.0+0x90/0x90
[  184.385001]  schedule+0xda/0x1b0
[  184.385521]  worker_thread+0x15f/0x1260
[  184.386151]  ? process_one_work+0x16a0/0x16a0
[  184.386791]  kthread+0x2ed/0x3a0
[  184.387314]  ? kthread_complete_and_exit+0x40/0x40
[  184.387997]  ret_from_fork+0x22/0x30
[  184.388576]  </TASK>
[  184.388910] INFO: task kworker/1:0H:21 blocked for more than 143 seconds.
[  184.389869]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.390628] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.391679] task:kworker/1:0H    state:I stack:29760 pid:21    ppid:2      flags:0x00004000
[  184.392832] Workqueue:  0x0 (events_highpri)
[  184.393476] Call Trace:
[  184.393834]  <TASK>
[  184.394195]  __schedule+0x893/0x2470
[  184.394734]  ? io_schedule_timeout+0x150/0x150
[  184.395422]  schedule+0xda/0x1b0
[  184.395914]  worker_thread+0x15f/0x1260
[  184.396527]  ? process_one_work+0x16a0/0x16a0
[  184.397196]  kthread+0x2ed/0x3a0
[  184.397688]  ? kthread_complete_and_exit+0x40/0x40
[  184.398406]  ret_from_fork+0x22/0x30
[  184.398956]  </TASK>
[  184.399327] INFO: task inet_frag_wq:23 blocked for more than 143 seconds.
[  184.400274]       Not tainted 6.0.0-rc7-next-20220930 #1
[  184.400991] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  184.402079] task:inet_frag_wq    state:I stack:30704 pid:23    ppid:2      flags:0x00004000
[  184.403265] Call Trace:
[  184.403624]  <TASK>
[  184.403947]  __schedule+0x893/0x2470
[  184.404523]  ? io_schedule_timeout+0x150/0x150
[  184.405184]  ? do_raw_spin_lock+0x121/0x260
[  184.405807]  ? rwlock_bug.part.0+0x90/0x90
[  184.406444]  schedule+0xda/0x1b0
[  184.406934]  rescuer_thread+0x851/0xdb0
[  184.407529]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.408252]  ? _raw_spin_unlock_irqrestore+0x28/0x60
[  184.408947]  ? lockdep_hardirqs_on+0x79/0x100
[  184.409604]  ? worker_thread+0x1260/0x1260
[  184.410258]  kthread+0x2ed/0x3a0
[  184.410740]  ? kthread_complete_and_exit+0x40/0x40
[  184.411459]  ret_from_fork+0x22/0x30
[  184.412005]  </TASK>
[  184.412434] 
[  184.412434] Showing all locks held in the system:
[  184.413272] 1 lock held by rcu_tasks_kthre/11:
[  184.413878]  #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10
[  184.415214] 1 lock held by khungtaskd/25:
[  184.415758]  #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[  184.416989] 1 lock held by in:imklog/203:
[  184.417567] 2 locks held by syz-executor/4300:
[  184.418226] 
[  184.418462] =============================================
[  184.418462] 

VM DIAGNOSIS:
09:45:59  Registers:
info registers vcpu 0
RAX=0000000000000015 RBX=0000000000000001 RCX=0000000000000000 RDX=0000000000000000
RSI=0000000000000001 RDI=ffffffff85e000fc RBP=ffff88801880faf0 RSP=ffff88801880fa18
R8 =ffffffff86245934 R9 =ffffffff86245938 R10=ffffed1003101f60 R11=000000000003603d
R12=ffff88801880fad9 R13=ffff88801880faf8 R14=ffff88801880fa98 R15=ffffffff86245939
RIP=ffffffff8111a613 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f6b190a7900 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6b185c8000 CR3=000000000f368000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff
YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134
YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561
YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572
YMM04=0000000000000000 0000000000000000 647ee195c0b49bac 0000000000135eb0
YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0
YMM06=0000000000000000 0000000000000000 1266eb593ea3e274 00000000000ae988
YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449
YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000
YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1
RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f840
R8 =0000000000000004 R9 =0000000000000010 R10=0000000000000010 R11=0000000000000001
R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000
RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 0000000000000000 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbd2666c344 CR3=00000000378b6000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b
YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000
YMM03=0000000000000000 0000000000000000 0000000000000000 3f731b9a73fbee32
YMM04=0000000000000000 0000000000000000 72705f6e65706f5f 7a7973203d203072
YMM05=0000000000000000 0000000000000000 63685f7462247465 6b636f735f74656e
YMM06=0000000000000000 0000000000000000 317830202c337830 202c663178302869
YMM07=0000000000000000 0000000000000000 5f74622474706f6b 636f737465670a29
YMM08=0000000000000000 0000000000000000 43494c4f505f4c45 4e4e4148435f5442
YMM09=0000000000000000 0000000000000000 617830202c323131 7830202c39722859
YMM10=0000000000000000 0000000000000000 3831303030303030 663778302826202c
YMM11=0000000000000000 0000000000000000 3066377830282620 2c3778303d293034
YMM12=0000000000000000 0000000000000000 0a293478303d2930 3838313030303030
YMM13=0000000000000000 0000000000000000 3030313230353063 7830202c66666666
YMM14=0000000000000000 0000000000000000 3030303030303030 663778302826202c
YMM15=0000000000000000 0000000000000000 0a297d3078303e3d 31723c7b3d293034