Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:59911' (ECDSA) to the list of known hosts. 2022/10/01 15:27:54 fuzzer started 2022/10/01 15:27:54 dialing manager at localhost:35095 syzkaller login: [ 39.624083] cgroup: Unknown subsys name 'net' [ 39.735502] cgroup: Unknown subsys name 'rlimit' 2022/10/01 15:28:09 syscalls: 203 2022/10/01 15:28:09 code coverage: enabled 2022/10/01 15:28:09 comparison tracing: enabled 2022/10/01 15:28:09 extra coverage: enabled 2022/10/01 15:28:09 setuid sandbox: enabled 2022/10/01 15:28:09 namespace sandbox: enabled 2022/10/01 15:28:09 Android sandbox: enabled 2022/10/01 15:28:09 fault injection: enabled 2022/10/01 15:28:09 leak checking: enabled 2022/10/01 15:28:09 net packet injection: enabled 2022/10/01 15:28:09 net device setup: enabled 2022/10/01 15:28:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/01 15:28:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/01 15:28:09 USB emulation: enabled 2022/10/01 15:28:09 hci packet injection: enabled 2022/10/01 15:28:09 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/01 15:28:09 802.15.4 emulation: enabled 2022/10/01 15:28:09 fetching corpus: 0, signal 0/0 (executing program) 2022/10/01 15:28:11 starting 8 fuzzer processes 15:28:11 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffed0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x5080) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x41) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) 15:28:11 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000780)={{0x0, 0x2, 0x78, 0x1, 0x4800000}}) r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x42}}, './file0\x00'}) 15:28:11 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) 15:28:11 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f00000006c0)={@broadcast, @broadcast}, &(0x7f0000000700)=0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000840)=@buf={0xcb, &(0x7f0000000740)="069eb6a96f04bf90097689c353e3760f701b1895f1aed8febe949e56e08cda8cb3933f876a12a34284623096addf4c1f5c5442b105122ed45b31267c8c398303ff4a776f6ba117d2b3826b484ef4b90f7b22453d01aae2d89c00e26f88e2134df0a762353d140e90c85620e15d8fa49c9aa94e30e4e961f6dd07b7799d9c86008320221fca0dc06db20f1056b5182fc4742106cfde1356c7819a4ad32e8a081d5a2c53851ac6d19605e9bd324c952853e3a070602781899bdd06202d16a338dfb94e5c9891c23c382dc8c6"}) 15:28:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x801) [ 55.329812] audit: type=1400 audit(1664638091.257:6): avc: denied { execmem } for pid=283 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 15:28:11 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003080)={0x718, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x8, 0xff, 0x662a2e54}, {0x4, 0x20, 0x8, 0x1ff}, {0x0, 0x3, 0x81, 0x80000001}, {0xf83, 0xa8, 0x2, 0x4367}, {0x6, 0x20, 0xfb}, {0xffe1, 0x80, 0x1f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf94381a}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x80}, 0x20044010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003840)='ns/ipc\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x20, r11, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 15:28:11 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r9 = dup(r3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) preadv(r7, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/93, 0x5d}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/78, 0x4e}, {&(0x7f0000003f80)=""/50, 0x32}, {&(0x7f0000003fc0)=""/88, 0x58}], 0x5, 0x6, 0x9) semget$private(0x0, 0x4, 0x425) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 15:28:11 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r7, {0x4d}}, './file0\x00'}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001840), 0x448400, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008003) [ 56.726610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.728227] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.739531] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.753648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.756783] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.800010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.818885] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.821207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.823414] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.824813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.825699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.826939] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 56.836062] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.837742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.839063] Bluetooth: hci0: HCI_REQ-0x0c1a [ 56.841151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.843764] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.845352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.847075] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.849837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.851156] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.853875] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.857869] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.862903] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.864147] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 56.865958] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.866983] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.868890] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.870105] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.871147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.872641] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 56.879240] Bluetooth: hci1: HCI_REQ-0x0c1a [ 56.880701] Bluetooth: hci2: HCI_REQ-0x0c1a [ 56.885112] Bluetooth: hci3: HCI_REQ-0x0c1a [ 56.897655] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 56.899427] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.901272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.902660] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.908193] Bluetooth: hci4: HCI_REQ-0x0c1a [ 56.913012] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 56.914799] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 56.916042] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 56.921004] Bluetooth: hci5: HCI_REQ-0x0c1a [ 56.932030] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 56.933764] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 56.941201] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 56.944443] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 56.945978] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 56.959899] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 56.961118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 56.970836] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 56.985740] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 56.990060] Bluetooth: hci7: HCI_REQ-0x0c1a [ 57.003858] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 57.008437] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 57.023174] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.932885] Bluetooth: hci4: command 0x0409 tx timeout [ 58.932897] Bluetooth: hci1: command 0x0409 tx timeout [ 58.934064] Bluetooth: hci5: command 0x0409 tx timeout [ 58.934394] Bluetooth: hci3: command 0x0409 tx timeout [ 58.935020] Bluetooth: hci2: command 0x0409 tx timeout [ 58.935430] Bluetooth: hci0: command 0x0409 tx timeout [ 59.060924] Bluetooth: hci6: command 0x0409 tx timeout [ 59.061690] Bluetooth: hci7: command 0x0409 tx timeout [ 60.980684] Bluetooth: hci0: command 0x041b tx timeout [ 60.981651] Bluetooth: hci2: command 0x041b tx timeout [ 60.982077] Bluetooth: hci3: command 0x041b tx timeout [ 60.982493] Bluetooth: hci5: command 0x041b tx timeout [ 60.982933] Bluetooth: hci1: command 0x041b tx timeout [ 60.983331] Bluetooth: hci4: command 0x041b tx timeout [ 61.108677] Bluetooth: hci7: command 0x041b tx timeout [ 61.109119] Bluetooth: hci6: command 0x041b tx timeout [ 63.028742] Bluetooth: hci4: command 0x040f tx timeout [ 63.029232] Bluetooth: hci1: command 0x040f tx timeout [ 63.029665] Bluetooth: hci5: command 0x040f tx timeout [ 63.030062] Bluetooth: hci3: command 0x040f tx timeout [ 63.030463] Bluetooth: hci2: command 0x040f tx timeout [ 63.030878] Bluetooth: hci0: command 0x040f tx timeout [ 63.156647] Bluetooth: hci6: command 0x040f tx timeout [ 63.157125] Bluetooth: hci7: command 0x040f tx timeout [ 65.076799] Bluetooth: hci0: command 0x0419 tx timeout [ 65.078309] Bluetooth: hci2: command 0x0419 tx timeout [ 65.079131] Bluetooth: hci3: command 0x0419 tx timeout [ 65.079920] Bluetooth: hci5: command 0x0419 tx timeout [ 65.080711] Bluetooth: hci1: command 0x0419 tx timeout [ 65.081486] Bluetooth: hci4: command 0x0419 tx timeout [ 65.204829] Bluetooth: hci7: command 0x0419 tx timeout [ 65.205706] Bluetooth: hci6: command 0x0419 tx timeout [ 114.245699] audit: type=1326 audit(1664638150.173:7): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=3985 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:26 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x801) 15:29:26 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffed0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x5080) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x41) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) 15:29:26 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f00000006c0)={@broadcast, @broadcast}, &(0x7f0000000700)=0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000840)=@buf={0xcb, &(0x7f0000000740)="069eb6a96f04bf90097689c353e3760f701b1895f1aed8febe949e56e08cda8cb3933f876a12a34284623096addf4c1f5c5442b105122ed45b31267c8c398303ff4a776f6ba117d2b3826b484ef4b90f7b22453d01aae2d89c00e26f88e2134df0a762353d140e90c85620e15d8fa49c9aa94e30e4e961f6dd07b7799d9c86008320221fca0dc06db20f1056b5182fc4742106cfde1356c7819a4ad32e8a081d5a2c53851ac6d19605e9bd324c952853e3a070602781899bdd06202d16a338dfb94e5c9891c23c382dc8c6"}) 15:29:26 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r9 = dup(r3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) preadv(r7, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/93, 0x5d}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/78, 0x4e}, {&(0x7f0000003f80)=""/50, 0x32}, {&(0x7f0000003fc0)=""/88, 0x58}], 0x5, 0x6, 0x9) semget$private(0x0, 0x4, 0x425) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 15:29:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) 15:29:26 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r7, {0x4d}}, './file0\x00'}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001840), 0x448400, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008003) 15:29:26 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000780)={{0x0, 0x2, 0x78, 0x1, 0x4800000}}) r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x42}}, './file0\x00'}) 15:29:26 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003080)={0x718, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x8, 0xff, 0x662a2e54}, {0x4, 0x20, 0x8, 0x1ff}, {0x0, 0x3, 0x81, 0x80000001}, {0xf83, 0xa8, 0x2, 0x4367}, {0x6, 0x20, 0xfb}, {0xffe1, 0x80, 0x1f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf94381a}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x80}, 0x20044010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003840)='ns/ipc\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x20, r11, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) [ 130.201619] audit: type=1326 audit(1664638166.129:8): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4002 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:26 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000780)={{0x0, 0x2, 0x78, 0x1, 0x4800000}}) r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x42}}, './file0\x00'}) 15:29:26 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f00000006c0)={@broadcast, @broadcast}, &(0x7f0000000700)=0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000840)=@buf={0xcb, &(0x7f0000000740)="069eb6a96f04bf90097689c353e3760f701b1895f1aed8febe949e56e08cda8cb3933f876a12a34284623096addf4c1f5c5442b105122ed45b31267c8c398303ff4a776f6ba117d2b3826b484ef4b90f7b22453d01aae2d89c00e26f88e2134df0a762353d140e90c85620e15d8fa49c9aa94e30e4e961f6dd07b7799d9c86008320221fca0dc06db20f1056b5182fc4742106cfde1356c7819a4ad32e8a081d5a2c53851ac6d19605e9bd324c952853e3a070602781899bdd06202d16a338dfb94e5c9891c23c382dc8c6"}) [ 130.406932] audit: type=1326 audit(1664638166.335:9): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4022 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:26 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffed0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x5080) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x41) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) 15:29:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) 15:29:26 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r7, {0x4d}}, './file0\x00'}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001840), 0x448400, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008003) 15:29:26 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f00000006c0)={@broadcast, @broadcast}, &(0x7f0000000700)=0x8) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000840)=@buf={0xcb, &(0x7f0000000740)="069eb6a96f04bf90097689c353e3760f701b1895f1aed8febe949e56e08cda8cb3933f876a12a34284623096addf4c1f5c5442b105122ed45b31267c8c398303ff4a776f6ba117d2b3826b484ef4b90f7b22453d01aae2d89c00e26f88e2134df0a762353d140e90c85620e15d8fa49c9aa94e30e4e961f6dd07b7799d9c86008320221fca0dc06db20f1056b5182fc4742106cfde1356c7819a4ad32e8a081d5a2c53851ac6d19605e9bd324c952853e3a070602781899bdd06202d16a338dfb94e5c9891c23c382dc8c6"}) [ 130.551227] audit: type=1326 audit(1664638166.479:10): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4034 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:37 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r7, {0x4d}}, './file0\x00'}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000001840), 0x448400, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000001b00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001a40)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c000}, 0x20008003) 15:29:37 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000780)={{0x0, 0x2, 0x78, 0x1, 0x4800000}}) r6 = syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x42}}, './file0\x00'}) 15:29:37 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffed0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x5080) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x41) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001780)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) 15:29:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x801) 15:29:37 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003080)={0x718, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x8, 0xff, 0x662a2e54}, {0x4, 0x20, 0x8, 0x1ff}, {0x0, 0x3, 0x81, 0x80000001}, {0xf83, 0xa8, 0x2, 0x4367}, {0x6, 0x20, 0xfb}, {0xffe1, 0x80, 0x1f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf94381a}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x80}, 0x20044010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003840)='ns/ipc\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x20, r11, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 15:29:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) getsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f00000006c0)={@broadcast, @broadcast}, &(0x7f0000000700)=0x8) 15:29:37 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$ETHTOOL_MSG_WOL_GET(r11, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={0x114, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000005}, 0x8000) 15:29:37 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r9 = dup(r3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) preadv(r7, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/93, 0x5d}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/78, 0x4e}, {&(0x7f0000003f80)=""/50, 0x32}, {&(0x7f0000003fc0)=""/88, 0x58}], 0x5, 0x6, 0x9) semget$private(0x0, 0x4, 0x425) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) [ 141.492313] audit: type=1326 audit(1664638177.420:11): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4057 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:37 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000780)={{0x0, 0x2, 0x78, 0x1, 0x4800000}}) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:29:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(r5, 0xc0189376, &(0x7f0000000680)={{0x1, 0x1, 0x18, r6, {0xffffffff}}, './file0\x00'}) 15:29:37 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 141.647345] audit: type=1326 audit(1664638177.575:12): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4081 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:37 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) r4 = dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x33}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x5b}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x68}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0xf}}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x40804) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:29:37 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) syz_open_dev$vcsa(&(0x7f0000000640), 0x1, 0x1) [ 141.795327] audit: type=1326 audit(1664638177.723:13): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4093 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:52 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r7, {0x4d}}, './file0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000001840), 0x448400, 0x0) 15:29:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x34, r9, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xa2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000041}, 0x801) [ 156.487497] audit: type=1326 audit(1664638192.415:14): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4108 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:52 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:29:52 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r9 = dup(r3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) preadv(r7, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/93, 0x5d}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/78, 0x4e}, {&(0x7f0000003f80)=""/50, 0x32}, {&(0x7f0000003fc0)=""/88, 0x58}], 0x5, 0x6, 0x9) semget$private(0x0, 0x4, 0x425) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 15:29:52 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) dup(r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:29:52 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x800, 0x0) 15:29:52 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffed0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x5080) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x3c, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44004}, 0x41) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) 15:29:52 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003080)={0x718, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x8, 0xff, 0x662a2e54}, {0x4, 0x20, 0x8, 0x1ff}, {0x0, 0x3, 0x81, 0x80000001}, {0xf83, 0xa8, 0x2, 0x4367}, {0x6, 0x20, 0xfb}, {0xffe1, 0x80, 0x1f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf94381a}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x80}, 0x20044010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003840)='ns/ipc\x00') r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000003980)={&(0x7f0000003880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003940)={&(0x7f0000003900)={0x20, r11, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x7f}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 15:29:52 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040) 15:29:52 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) sendmsg$BATADV_CMD_SET_HARDIF(r11, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r12, 0x811, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x20040000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:29:52 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003080)={0x718, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x8, 0xff, 0x662a2e54}, {0x4, 0x20, 0x8, 0x1ff}, {0x0, 0x3, 0x81, 0x80000001}, {0xf83, 0xa8, 0x2, 0x4367}, {0x6, 0x20, 0xfb}, {0xffe1, 0x80, 0x1f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf94381a}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x80}, 0x20044010) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000003840)='ns/ipc\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) 15:29:52 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) dup(r1) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) [ 156.805606] audit: type=1326 audit(1664638192.733:15): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4139 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:52 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000001300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000012c0)={&(0x7f00000011c0)={0xd4, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x80000000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xfffffed0}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x5080) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) 15:29:52 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r9 = dup(r3) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r9}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) preadv(r7, &(0x7f0000004040)=[{&(0x7f0000003e00)=""/93, 0x5d}, {&(0x7f0000003e80)=""/99, 0x63}, {&(0x7f0000003f00)=""/78, 0x4e}, {&(0x7f0000003f80)=""/50, 0x32}, {&(0x7f0000003fc0)=""/88, 0x58}], 0x5, 0x6, 0x9) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 15:29:52 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:29:52 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) 15:29:52 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001800)={{0x1, 0x1, 0x18, r7, {0x4d}}, './file0\x00'}) 15:29:52 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'dummy0\x00'}) 15:29:52 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000580)={{0xd1, 0xab}, {0x4, 0x35}, 0x2, 0x5, 0x5}) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) [ 157.148690] audit: type=1326 audit(1664638193.076:16): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4168 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:53 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:29:53 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000003800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000037c0)={&(0x7f0000003080)={0x718, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [{{0x8}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xff, 0x8, 0xff, 0x662a2e54}, {0x4, 0x20, 0x8, 0x1ff}, {0x0, 0x3, 0x81, 0x80000001}, {0xf83, 0xa8, 0x2, 0x4367}, {0x6, 0x20, 0xfb}, {0xffe1, 0x80, 0x1f, 0x2}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x25c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7a}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x26d6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf94381a}}, {0x8}}}]}}]}, 0x718}, 0x1, 0x0, 0x0, 0x80}, 0x20044010) syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) 15:29:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x121042, 0x0) 15:29:53 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r3, 0x80605414, &(0x7f0000000500)) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) [ 157.430160] audit: type=1326 audit(1664638193.358:17): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4180 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:29:53 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001140)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001100)={&(0x7f0000000980)={0x768, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xdaf}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb48b}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xfff8, 0x7f, 0x0, 0x1f}, {0x1ff, 0x5d, 0x5f, 0x1}, {0x153, 0x2, 0x1, 0x10001}]}}}]}}, {{0x8, 0x1, r2}, {0x90, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0x1, 0x1, 0xbf}, {0x1, 0x4, 0x7f, 0x40}, {0x6, 0x4, 0x4}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r7}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}]}, 0x768}, 0x1, 0x0, 0x0, 0x804}, 0x20040800) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) 15:29:53 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) 15:29:53 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:29:53 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) openat$full(0xffffffffffffff9c, &(0x7f00000004c0), 0x22281, 0x0) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:29:53 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000440)) [ 157.769165] audit: type=1326 audit(1664638193.697:18): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4204 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:30:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 169.637142] audit: type=1326 audit(1664638205.565:19): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4223 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:30:05 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r8 = dup(r3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ff9000/0x4000)=nil) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 15:30:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r8) 15:30:05 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00'}) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) 15:30:05 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000003040)={'bridge_slave_0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) 15:30:05 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) connect$bt_sco(r2, &(0x7f0000000480)={0x1f, @none}, 0x8) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:30:05 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) r2 = dup(r1) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r3, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0xffff}}, './file0\x00'}) 15:30:05 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700)=0x0, &(0x7f0000001740)) syz_io_uring_submit(r6, 0x0, &(0x7f0000001780)=@IORING_OP_FADVISE={0x18, 0xe60051f0111d06af, 0x0, @fd_index=0x2, 0x1ff, 0x0, 0x6, 0x2}, 0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) 15:30:05 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) dup(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r2, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={0x0, 0x9, 0x10001}) [ 169.752546] audit: type=1326 audit(1664638205.680:20): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4245 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:30:05 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) dup(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r2, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) 15:30:05 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000440), 0x40080, 0x0) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:30:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) getsockopt$bt_sco_SCO_OPTIONS(r10, 0x11, 0x1, &(0x7f0000000300)=""/181, &(0x7f00000003c0)=0xb5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 169.933162] audit: type=1326 audit(1664638205.861:21): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4253 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:30:05 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000780)={'erspan0\x00', 0x0, 0x7, 0x10, 0xffffffff, 0x101, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x65, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102, {[@end, @timestamp={0x44, 0xc, 0x11, 0x0, 0xc, [0x7fff, 0xc83e]}, @lsrr={0x83, 0x27, 0x33, [@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1]}]}}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) 15:30:05 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700), &(0x7f0000001740)) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) 15:30:05 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) dup(r1) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) connect$bt_sco(r2, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}}, 0x8) [ 170.122516] audit: type=1326 audit(1664638206.050:22): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4268 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 [ 179.636938] Bluetooth: hci0: command 0x0406 tx timeout [ 179.638028] Bluetooth: hci1: command 0x0406 tx timeout [ 179.639001] Bluetooth: hci2: command 0x0406 tx timeout [ 179.639951] Bluetooth: hci3: command 0x0406 tx timeout [ 179.640882] Bluetooth: hci4: command 0x0406 tx timeout [ 179.641816] Bluetooth: hci5: command 0x0406 tx timeout [ 179.642743] Bluetooth: hci6: command 0x0406 tx timeout [ 179.643673] Bluetooth: hci7: command 0x0406 tx timeout 15:30:17 executing program 7: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) socketpair(0xa, 0x800, 0x5, &(0x7f0000000140)) syz_open_dev$vcsu(&(0x7f0000000180), 0x400, 0xc00) r1 = syz_open_dev$vcsu(&(0x7f00000001c0), 0x9817, 0x4100) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000200)={0x6}, 0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0x4, 0x40, 0x3f, 0xf0}, {0x4, 0x67, 0xfe, 0x101}, {0xad07, 0x1, 0x9, 0xfff}]}) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000002c0)={{0x0, 0x8}, 0x100, './file0\x00'}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='io\x00') r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x20080) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {r4}}, './file0\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x5, &(0x7f00000004c0)=[{0xfe, 0x13, 0x1, 0x10000}, {0xff, 0x0, 0xb6}, {0x6, 0x1, 0x1, 0x8001}, {0x3, 0x2, 0x2, 0x899}, {0x400, 0x8, 0x3, 0xd63}]}) preadv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/151, 0x97}], 0x2, 0x1, 0x81) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000001640)={0x0, 0xffffffffffffff84, 0x401}) syz_io_uring_setup(0x34e5, &(0x7f0000001680)={0x0, 0x1a23, 0x20, 0x3, 0x365}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000001700), &(0x7f0000001740)) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000017c0), 0x40000) 15:30:17 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xa82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x880c5) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x400400, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) write$cgroup_netprio_ifpriomap(r1, &(0x7f00000001c0)={'bond0', 0x32, 0x37}, 0x8) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xff}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000300)={{0x0, 0x1}, 0x100, './file0\x00'}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xee01}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x54, r0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf82}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/time_for_children\x00') r6 = dup(r5) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000680)={0x0, @dev, @multicast1}, &(0x7f00000006c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000740)={'gretap0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x40, 0x700, 0x1000, 0x2, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x65, 0x0, 0x3d, 0x4, 0x0, @empty, @multicast2, {[@noop]}}}}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000038c0), r3) 15:30:17 executing program 6: r0 = semget$private(0x0, 0x1, 0x430) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000000)=""/254) semctl$SEM_STAT(0x0, 0x1, 0x12, &(0x7f0000000100)=""/4096) shmget$private(0x0, 0x4000, 0x4, &(0x7f0000ff9000/0x4000)=nil) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f0000001100)=""/4096, &(0x7f0000002100)=0x1000) pipe(&(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000002140), r2) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f00000021c0)={0x7ff}, 0x4) socket$inet(0x2, 0x0, 0x20) pipe2(&(0x7f0000002200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002240)='/sys/class/mem', 0xa0400, 0x10) io_uring_setup(0x4dfe, &(0x7f0000002280)={0x0, 0xdd, 0x10, 0x2, 0xa3}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000002300)={{0x1, 0x1, 0x18, r1, {r3}}, './file0\x00'}) r8 = dup(r3) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000003dc0)={0x1bc, 0x0, &(0x7f0000003b40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000024c0)={@ptr={0x70742a85, 0x1, &(0x7f0000002340)=""/247, 0xf7, 0x1, 0x17}, @ptr={0x70742a85, 0x1, &(0x7f0000002440)=""/92, 0x5c, 0x1, 0x20}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000002540)={0x0, 0x28, 0x50}}}, @free_buffer, @clear_death={0x400c630f, 0x3}, @acquire={0x40046305, 0x2}, @increfs_done={0x40106308, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x78, 0x18, &(0x7f0000002780)={@ptr={0x70742a85, 0x1, &(0x7f0000002580)=""/152, 0x98, 0x2, 0x36}, @ptr={0x70742a85, 0x1, &(0x7f0000002640)=""/110, 0x6e, 0x0, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f00000026c0)=""/133, 0x85, 0x2, 0x9}}, &(0x7f0000002800)={0x0, 0x28, 0x50}}, 0x1000}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000003840)={@ptr={0x70742a85, 0x1, &(0x7f0000002840)=""/4096, 0x1000, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x9, 0x1, 0x3a}}, &(0x7f00000038c0)={0x0, 0x28, 0x40}}, 0x1000}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003900)={@fda={0x66646185, 0x6, 0x0, 0x8}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f0000003980)={0x0, 0x20, 0x38}}, 0x40}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003a80)={@fda={0x66646185, 0x1, 0x0, 0x3e}, @ptr={0x70742a85, 0x40, &(0x7f00000039c0)=""/167, 0xa7, 0x2, 0x3f}, @fda={0x66646185, 0x0, 0x0, 0x2b}}, &(0x7f0000003b00)={0x0, 0x20, 0x48}}}, @acquire={0x40046305, 0x1}], 0x93, 0x0, &(0x7f0000003d00)="65a0e99007067e918991e3cb68fd79be344768d185e6a6eb1030ce48c1c9cbef4593b89901975db4702132464aba18dbea514b243d563fef25fcddf54dbb781726baaeaad5f55e2a5868531ede9ed120f15cd9f19e97f176bd20775ccb6529bc3db51caee30bb715af1a8619457f7e29413ea5678ef5a4821e2493586e92712e863c3a695f784a04884c17461fe5bd4baa2398"}) pkey_mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x2, 0xffffffffffffffff) 15:30:17 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) 15:30:17 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000003c0)={0x3, 0x9, 0x1}) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:30:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r5}}, './file0\x00'}) memfd_secret(0x0) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r8, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r9, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {r7}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:30:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) dup(r1) openat$bsg(0xffffffffffffff9c, &(0x7f0000000300), 0x40040, 0x0) 15:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) [ 181.742088] audit: type=1326 audit(1664638217.669:23): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4282 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:30:17 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000340)={0x8, 0x0, 0x2}) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:30:17 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) dup(r1) 15:30:17 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x40, 0x200000) r1 = memfd_secret(0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xef77}}, './file0\x00'}) r3 = accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000100)={0x0, 0x8, [0x80, 0x80000001, 0x7fff, 0xd5, 0x96, 0x7ff]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xee01, r4}}, './file0\x00'}) memfd_secret(0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x8200, 0x0) openat$cgroup_devices(r5, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 15:30:17 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2004, @fd, 0x3, 0xffffffff, 0xfffffbff, 0x8, 0x0, {0x3}}, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@remote}, &(0x7f0000000080)=0x8) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x100, 0x70bd2d, 0x4, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8041) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg0\x00'}) syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1_to_batadv\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'macvlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000880)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000008c0)={'wg0\x00'}) recvmsg(r0, &(0x7f0000001680)={&(0x7f0000001440)=@pppoe, 0x80, &(0x7f0000001580)=[{&(0x7f00000014c0)=""/72, 0x48}, {&(0x7f0000001540)=""/17, 0x11}], 0x2, &(0x7f00000015c0)=""/149, 0x95}, 0x40010102) [ 181.991307] audit: type=1326 audit(1664638217.919:24): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4313 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 15:30:17 executing program 1: ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x5, 0xdd}, 'port0\x00', 0x4, 0x1000, 0x8, 0x1, 0x7, 0xffffffff, 0x934b}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000000c0)={{0x2, 0x3f}, {0x3f, 0x7f}, 0x0, 0x2, 0x40}) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000001c0)={{0xcc, 0x81}, 'port0\x00', 0x1, 0x2, 0x3, 0x7f, 0x0, 0xfffffffc, 0xfffffffa, 0x0, 0x0, 0x80}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/class/pcmcia_socket', 0x500, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000002c0)) openat$null(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f00000007c0), 0x4, 0x300) 15:30:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8881) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r1, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="2f81793c9673"}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8000}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x38}}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r3, 0x200, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x40}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x90}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xd3}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x3c, r1, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r5, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r6, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x48082}, 0x40005) r8 = socket(0x2a, 0x2, 0x100) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r8) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x846) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24000002) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000005}, 0x4) 15:30:18 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000001c0)={{r0}, 0x1, &(0x7f0000000180)=[0xfffffffffffffffe], 0x96, 0x7, [0xffffffffffffffff, 0x6, 0x7]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x7, 0x632b363d}]}) [ 182.187510] audit: type=1326 audit(1664638218.115:25): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=4330 comm="syz-executor.3" exe="/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67a674fb19 code=0x632b0000 [ 182.708631] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 182.710207] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.711488] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.713246] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 182.715667] Call Trace: [ 182.716542] [ 182.717038] __schedule+0x893/0x2470 [ 182.717793] ? io_schedule_timeout+0x150/0x150 [ 182.718672] ? do_raw_spin_lock+0x121/0x260 [ 182.719478] ? rwlock_bug.part.0+0x90/0x90 [ 182.720304] schedule+0xda/0x1b0 [ 182.720996] rescuer_thread+0x851/0xdb0 [ 182.721786] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.722765] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.723726] ? lockdep_hardirqs_on+0x79/0x100 [ 182.724553] ? worker_thread+0x1260/0x1260 [ 182.725419] kthread+0x2ed/0x3a0 [ 182.726092] ? kthread_complete_and_exit+0x40/0x40 [ 182.727039] ret_from_fork+0x22/0x30 [ 182.727788] [ 182.728203] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 182.729434] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.730399] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.731854] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 182.733420] Call Trace: [ 182.733905] [ 182.734320] __schedule+0x893/0x2470 [ 182.735076] ? io_schedule_timeout+0x150/0x150 [ 182.735969] ? do_raw_spin_lock+0x121/0x260 [ 182.736813] ? rwlock_bug.part.0+0x90/0x90 [ 182.737672] schedule+0xda/0x1b0 [ 182.738310] rescuer_thread+0x851/0xdb0 [ 182.739111] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.740078] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.741056] ? lockdep_hardirqs_on+0x79/0x100 [ 182.741950] ? worker_thread+0x1260/0x1260 [ 182.742769] kthread+0x2ed/0x3a0 [ 182.743368] ? kthread_complete_and_exit+0x40/0x40 [ 182.744312] ret_from_fork+0x22/0x30 [ 182.745085] [ 182.745412] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 182.746301] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.747011] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.748021] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 182.749144] Call Trace: [ 182.749483] [ 182.749835] __schedule+0x893/0x2470 [ 182.750343] ? io_schedule_timeout+0x150/0x150 [ 182.750984] ? do_raw_spin_lock+0x121/0x260 [ 182.751601] ? rwlock_bug.part.0+0x90/0x90 [ 182.752172] schedule+0xda/0x1b0 [ 182.752678] rescuer_thread+0x851/0xdb0 [ 182.753215] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.753913] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.754608] ? lockdep_hardirqs_on+0x79/0x100 [ 182.755206] ? worker_thread+0x1260/0x1260 [ 182.755813] kthread+0x2ed/0x3a0 [ 182.756321] ? kthread_complete_and_exit+0x40/0x40 [ 182.757080] ret_from_fork+0x22/0x30 [ 182.757698] [ 182.758045] INFO: task netns:6 blocked for more than 143 seconds. [ 182.758952] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.759759] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.760862] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 182.762090] Call Trace: [ 182.762461] [ 182.762842] __schedule+0x893/0x2470 [ 182.763407] ? io_schedule_timeout+0x150/0x150 [ 182.764120] ? do_raw_spin_lock+0x121/0x260 [ 182.764782] ? rwlock_bug.part.0+0x90/0x90 [ 182.765405] schedule+0xda/0x1b0 [ 182.765948] rescuer_thread+0x851/0xdb0 [ 182.766537] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.767302] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.768069] ? lockdep_hardirqs_on+0x79/0x100 [ 182.768758] ? worker_thread+0x1260/0x1260 [ 182.769394] kthread+0x2ed/0x3a0 [ 182.769943] ? kthread_complete_and_exit+0x40/0x40 [ 182.770693] ret_from_fork+0x22/0x30 [ 182.771270] [ 182.771664] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 182.772623] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.773379] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.774504] task:kworker/0:0 state:I stack:29256 pid:7 ppid:2 flags:0x00004000 [ 182.775722] Workqueue: 0x0 (ata_sff) [ 182.776241] Call Trace: [ 182.776620] [ 182.776925] __schedule+0x893/0x2470 [ 182.777437] ? io_schedule_timeout+0x150/0x150 [ 182.778097] schedule+0xda/0x1b0 [ 182.778555] worker_thread+0x15f/0x1260 [ 182.779136] ? process_one_work+0x16a0/0x16a0 [ 182.779780] kthread+0x2ed/0x3a0 [ 182.780233] ? kthread_complete_and_exit+0x40/0x40 [ 182.780898] ret_from_fork+0x22/0x30 [ 182.781435] [ 182.781788] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 182.782651] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.783322] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.784321] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 182.785408] Workqueue: 0x0 (kblockd) [ 182.785953] Call Trace: [ 182.786287] [ 182.786625] __schedule+0x893/0x2470 [ 182.787134] ? io_schedule_timeout+0x150/0x150 [ 182.787789] schedule+0xda/0x1b0 [ 182.788248] worker_thread+0x15f/0x1260 [ 182.788833] ? process_one_work+0x16a0/0x16a0 [ 182.789450] kthread+0x2ed/0x3a0 [ 182.789940] ? kthread_complete_and_exit+0x40/0x40 [ 182.790616] ret_from_fork+0x22/0x30 [ 182.791125] [ 182.791438] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 182.792325] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.793038] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.794046] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 182.795130] Call Trace: [ 182.795462] [ 182.795801] __schedule+0x893/0x2470 [ 182.796304] ? io_schedule_timeout+0x150/0x150 [ 182.796934] ? do_raw_spin_lock+0x121/0x260 [ 182.797518] ? rwlock_bug.part.0+0x90/0x90 [ 182.798129] schedule+0xda/0x1b0 [ 182.798628] rescuer_thread+0x851/0xdb0 [ 182.799155] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.799840] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.800485] ? lockdep_hardirqs_on+0x79/0x100 [ 182.801124] ? worker_thread+0x1260/0x1260 [ 182.801719] kthread+0x2ed/0x3a0 [ 182.802165] ? kthread_complete_and_exit+0x40/0x40 [ 182.802842] ret_from_fork+0x22/0x30 [ 182.803357] [ 182.803703] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 182.804626] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.805297] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.806296] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 182.807390] Call Trace: [ 182.807768] [ 182.808074] __schedule+0x893/0x2470 [ 182.808623] ? io_schedule_timeout+0x150/0x150 [ 182.809236] ? mark_held_locks+0x9e/0xe0 [ 182.809823] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.810474] schedule+0xda/0x1b0 [ 182.810978] rcu_tasks_one_gp+0x3db/0xc10 [ 182.811549] rcu_tasks_kthread+0x80/0xa0 [ 182.812122] ? rcu_tasks_postscan+0x10/0x10 [ 182.812735] kthread+0x2ed/0x3a0 [ 182.813195] ? kthread_complete_and_exit+0x40/0x40 [ 182.813874] ret_from_fork+0x22/0x30 [ 182.814383] [ 182.814771] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 182.815692] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.816357] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.817370] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 182.818429] Workqueue: 0x0 (rcu_gp) [ 182.818968] Call Trace: [ 182.819295] [ 182.819626] __schedule+0x893/0x2470 [ 182.820125] ? io_schedule_timeout+0x150/0x150 [ 182.820761] schedule+0xda/0x1b0 [ 182.821236] worker_thread+0x15f/0x1260 [ 182.821815] ? process_one_work+0x16a0/0x16a0 [ 182.822403] kthread+0x2ed/0x3a0 [ 182.822886] ? kthread_complete_and_exit+0x40/0x40 [ 182.823517] ret_from_fork+0x22/0x30 [ 182.824058] [ 182.824366] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 182.825245] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.825937] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.826917] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 182.827998] Workqueue: 0x0 (events_highpri) [ 182.828609] Call Trace: [ 182.828945] [ 182.829264] __schedule+0x893/0x2470 [ 182.829808] ? io_schedule_timeout+0x150/0x150 [ 182.830416] schedule+0xda/0x1b0 [ 182.830911] worker_thread+0x15f/0x1260 [ 182.831457] ? process_one_work+0x16a0/0x16a0 [ 182.832100] kthread+0x2ed/0x3a0 [ 182.832548] ? kthread_complete_and_exit+0x40/0x40 [ 182.833226] ret_from_fork+0x22/0x30 [ 182.833771] [ 182.834143] [ 182.834143] Showing all locks held in the system: [ 182.834956] 1 lock held by rcu_tasks_kthre/11: [ 182.835526] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 182.836810] 1 lock held by khungtaskd/25: [ 182.837336] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 182.838514] 2 locks held by in:imklog/187: [ 182.839065] 3 locks held by rs:main Q:Reg/188: [ 182.839657] #0: ffff88806ce37e98 (&rq->__lock){-.-.}-{2:2}, at: __schedule+0x1cf/0x2470 [ 182.840745] #1: ffff888009996438 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x127/0x250 [ 182.841851] #2: ffff88801b954990 (&sb->s_type->i_mutex_key#6){++++}-{3:3}, at: ext4_buffered_write_iter+0xb0/0x460 [ 182.843200] 3 locks held by syz-executor/4333: [ 182.843803] [ 182.844026] ============================================= [ 182.844026] VM DIAGNOSIS: 15:30:18 Registers: info registers vcpu 0 RAX=1ffff11002ace049 RBX=ffff888015670218 RCX=ffffffff817bd091 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff888015670248 RBP=ffff8880152097e0 RSP=ffff888036be7ac0 R8 =0000000000000000 R9 =ffff88800f658007 R10=ffffed1001ecb000 R11=0000000000000001 R12=dffffc0000000000 R13=ffffea00008f0648 R14=ffffea00008f0648 R15=0000000000000286 RIP=ffffffff817bb812 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555729f400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f65e7a12330 CR3=00000000101fc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f73fd638e2f21aa YMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000031 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000031 R11=0000000000000001 R12=0000000000000031 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055f5ac1cbe40 CR3=000000001abec000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 41460a6c57f3847b YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f7427cd8370a4c1 YMM04=0000000000000000 0000000000000000 1e180c814b21201a 7938849636589ba9 YMM05=0000000000000000 0000000000000000 2a911888de6cec9a bfd6f00bccec30b9 YMM06=0000000000000000 0000000000000000 bfb0f3d6455a1d44 1487d97f9a29ec9c YMM07=0000000000000000 0000000000000000 eab2796118e407bb b3a3a9a27ba77640 YMM08=0000000000000000 0000000000000000 a8a3aab6ec3e7409 865e7e95ee08ecbf YMM09=0000000000000000 0000000000000000 f4b4aef988465ea8 0b502b3ed7f63ba9 YMM10=0000000000000000 0000000000000000 46c2e039946d9c5d 7ddb1a6b8e2dbb32 YMM11=0000000000000000 0000000000000000 6443ce1f5a6f7b94 f6a98e50aef992b5 YMM12=0000000000000000 0000000000000000 5408a496a986201a 040ed259a8294bd6 YMM13=0000000000000000 0000000000000000 5441422467736d64 6e65730a29666666 YMM14=0000000000000000 0000000000000000 4e4152545f544547 5f444d435f564441 YMM15=0000000000000000 0000000000000000 3072284c41424f4c 475f454c42415453