Warning: Permanently added '[localhost]:47338' (ECDSA) to the list of known hosts. 2022/10/02 01:24:32 fuzzer started 2022/10/02 01:24:33 dialing manager at localhost:35095 syzkaller login: [ 44.649353] cgroup: Unknown subsys name 'net' [ 44.840854] cgroup: Unknown subsys name 'rlimit' 2022/10/02 01:24:48 syscalls: 207 2022/10/02 01:24:48 code coverage: enabled 2022/10/02 01:24:48 comparison tracing: enabled 2022/10/02 01:24:48 extra coverage: enabled 2022/10/02 01:24:48 setuid sandbox: enabled 2022/10/02 01:24:48 namespace sandbox: enabled 2022/10/02 01:24:48 Android sandbox: enabled 2022/10/02 01:24:48 fault injection: enabled 2022/10/02 01:24:48 leak checking: enabled 2022/10/02 01:24:48 net packet injection: enabled 2022/10/02 01:24:48 net device setup: enabled 2022/10/02 01:24:48 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 01:24:48 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 01:24:48 USB emulation: enabled 2022/10/02 01:24:48 hci packet injection: enabled 2022/10/02 01:24:48 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 01:24:48 802.15.4 emulation: enabled 2022/10/02 01:24:48 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 01:24:50 starting 8 fuzzer processes 01:24:50 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r11, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x1b, 0x1, "d3268cdf7416178146a876831e4e74469a3f39a6a1270215ca30b16aa31facc28aafc0dd5d6e1e4f853f3563ccd3981e84de0549902ff661582a2170cf5afb38", "984765d3218b2d584039a8d96a021f1e86660e7391e839f2871bc6c4c899aa0b", [0x8, 0x6]}) syz_io_uring_submit(r10, 0x0, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0xe, {0x0, r8}, 0x5, 0x0, 0x0, {0x0, 0x0, r9}}, 0xa6) 01:24:50 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r11) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002040)='/dev/bsg\x00', 0x0, r12) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002080)=0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) 01:24:50 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) r10 = fsmount(r0, 0x1, 0x8) process_madvise(r10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:24:50 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/123, 0x7b}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}}, 0x4040881) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) 01:24:50 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) gettid() setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000006a40)=0x101, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) [ 61.256898] audit: type=1400 audit(1664673890.373:6): avc: denied { execmem } for pid=287 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:24:50 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) r7 = fsmount(r0, 0x1, 0x5) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000d40)=""/129) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000f40)=0x7fffffff) 01:24:50 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() waitid(0x2, r3, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r3, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r3, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r3}) waitid(0x2, r3, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r5 = syz_io_uring_complete(r4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r5) r6 = syz_io_uring_complete(r2) mq_timedsend(r6, &(0x7f0000001c80)="13ef260e5cac6f9247284e4b24e0ceb8c624fff446d9429bed6e0fb003cf70f9921b5db6e84a2c218e61041dfbfdb5ad05f58e8066912774990b26b5b23d0af79a2286a24485e68897a47340f179905e7522e73477c909ad47b066586bbc85b6124953be4ade42729d303bde7c4b1a0c525bef083127a256e97eb3815bfafdb2d0d8cddc1b7f39d2289a8de9d7bdc07dead9638bd59d61f001ebf2ebdd6e5da25f6bd78bd99da47b5d242192b4c9f26c8907ecc2459463ba3870d1092c270984f339c17a02f961917b5d3eac", 0xcc, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000001dc0)=0x4, 0x0, 0x4) 01:24:50 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 62.692857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.694490] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.697678] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.699188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.700338] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.700594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.702945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.703273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.704629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.708648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.710428] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.712456] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.721530] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.723201] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.728841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.732325] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.733368] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.734630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.736584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.738890] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.740321] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.741764] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.743275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.743619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.749604] Bluetooth: hci1: HCI_REQ-0x0c1a [ 62.749874] Bluetooth: hci0: HCI_REQ-0x0c1a [ 62.765699] Bluetooth: hci2: HCI_REQ-0x0c1a [ 62.768580] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.770367] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.772022] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.773155] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.774514] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.775922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.781486] Bluetooth: hci4: HCI_REQ-0x0c1a [ 62.796584] Bluetooth: hci3: HCI_REQ-0x0c1a [ 62.814844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 62.816791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 62.818425] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 62.822341] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 62.824286] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 62.826246] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 62.828101] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 62.832199] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 62.836254] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 62.837457] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 62.843137] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 62.847686] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 62.849250] Bluetooth: hci6: HCI_REQ-0x0c1a [ 62.855177] Bluetooth: hci7: HCI_REQ-0x0c1a [ 64.754054] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 64.817322] Bluetooth: hci4: command 0x0409 tx timeout [ 64.818221] Bluetooth: hci3: command 0x0409 tx timeout [ 64.819058] Bluetooth: hci2: command 0x0409 tx timeout [ 64.819645] Bluetooth: hci1: command 0x0409 tx timeout [ 64.820260] Bluetooth: hci0: command 0x0409 tx timeout [ 64.882472] Bluetooth: hci6: command 0x0409 tx timeout [ 64.883038] Bluetooth: hci7: command 0x0409 tx timeout [ 66.865091] Bluetooth: hci0: command 0x041b tx timeout [ 66.865540] Bluetooth: hci1: command 0x041b tx timeout [ 66.866095] Bluetooth: hci2: command 0x041b tx timeout [ 66.866470] Bluetooth: hci3: command 0x041b tx timeout [ 66.866832] Bluetooth: hci4: command 0x041b tx timeout [ 66.930043] Bluetooth: hci7: command 0x041b tx timeout [ 66.930487] Bluetooth: hci6: command 0x041b tx timeout [ 68.914055] Bluetooth: hci4: command 0x040f tx timeout [ 68.914085] Bluetooth: hci3: command 0x040f tx timeout [ 68.914499] Bluetooth: hci2: command 0x040f tx timeout [ 68.914921] Bluetooth: hci1: command 0x040f tx timeout [ 68.915296] Bluetooth: hci0: command 0x040f tx timeout [ 68.977070] Bluetooth: hci6: command 0x040f tx timeout [ 68.977476] Bluetooth: hci7: command 0x040f tx timeout [ 69.554106] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 70.961443] Bluetooth: hci1: command 0x0419 tx timeout [ 70.962324] Bluetooth: hci2: command 0x0419 tx timeout [ 70.963668] Bluetooth: hci3: command 0x0419 tx timeout [ 70.964396] Bluetooth: hci4: command 0x0419 tx timeout [ 70.965118] Bluetooth: hci0: command 0x0419 tx timeout [ 71.026077] Bluetooth: hci7: command 0x0419 tx timeout [ 71.026825] Bluetooth: hci6: command 0x0419 tx timeout [ 72.052923] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.054811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.056793] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.059718] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.087279] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.088481] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.103597] Bluetooth: hci5: HCI_REQ-0x0c1a [ 74.162124] Bluetooth: hci5: command 0x0409 tx timeout [ 76.210040] Bluetooth: hci5: command 0x041b tx timeout [ 78.257033] Bluetooth: hci5: command 0x040f tx timeout [ 80.306238] Bluetooth: hci5: command 0x0419 tx timeout 01:26:02 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) gettid() setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000006a40)=0x101, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 01:26:02 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r11, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x1b, 0x1, "d3268cdf7416178146a876831e4e74469a3f39a6a1270215ca30b16aa31facc28aafc0dd5d6e1e4f853f3563ccd3981e84de0549902ff661582a2170cf5afb38", "984765d3218b2d584039a8d96a021f1e86660e7391e839f2871bc6c4c899aa0b", [0x8, 0x6]}) syz_io_uring_submit(r10, 0x0, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0xe, {0x0, r8}, 0x5, 0x0, 0x0, {0x0, 0x0, r9}}, 0xa6) 01:26:02 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 01:26:02 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/123, 0x7b}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}}, 0x4040881) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) 01:26:02 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() waitid(0x2, r3, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r3, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r3, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r3}) waitid(0x2, r3, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r5 = syz_io_uring_complete(r4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r5) r6 = syz_io_uring_complete(r2) mq_timedsend(r6, &(0x7f0000001c80)="13ef260e5cac6f9247284e4b24e0ceb8c624fff446d9429bed6e0fb003cf70f9921b5db6e84a2c218e61041dfbfdb5ad05f58e8066912774990b26b5b23d0af79a2286a24485e68897a47340f179905e7522e73477c909ad47b066586bbc85b6124953be4ade42729d303bde7c4b1a0c525bef083127a256e97eb3815bfafdb2d0d8cddc1b7f39d2289a8de9d7bdc07dead9638bd59d61f001ebf2ebdd6e5da25f6bd78bd99da47b5d242192b4c9f26c8907ecc2459463ba3870d1092c270984f339c17a02f961917b5d3eac", 0xcc, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000001dc0)=0x4, 0x0, 0x4) 01:26:02 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) r7 = fsmount(r0, 0x1, 0x5) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000d40)=""/129) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000f40)=0x7fffffff) 01:26:02 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r11) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002040)='/dev/bsg\x00', 0x0, r12) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002080)=0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) 01:26:02 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) r10 = fsmount(r0, 0x1, 0x8) process_madvise(r10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:02 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) r7 = fsmount(r0, 0x1, 0x5) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000d40)=""/129) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000f40)=0x7fffffff) 01:26:02 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) r10 = fsmount(r0, 0x1, 0x8) process_madvise(r10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:02 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r11) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002040)='/dev/bsg\x00', 0x0, r12) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002080)=0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) 01:26:02 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() waitid(0x2, r3, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r3, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r3, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r3}) waitid(0x2, r3, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r5 = syz_io_uring_complete(r4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r5) r6 = syz_io_uring_complete(r2) mq_timedsend(r6, &(0x7f0000001c80)="13ef260e5cac6f9247284e4b24e0ceb8c624fff446d9429bed6e0fb003cf70f9921b5db6e84a2c218e61041dfbfdb5ad05f58e8066912774990b26b5b23d0af79a2286a24485e68897a47340f179905e7522e73477c909ad47b066586bbc85b6124953be4ade42729d303bde7c4b1a0c525bef083127a256e97eb3815bfafdb2d0d8cddc1b7f39d2289a8de9d7bdc07dead9638bd59d61f001ebf2ebdd6e5da25f6bd78bd99da47b5d242192b4c9f26c8907ecc2459463ba3870d1092c270984f339c17a02f961917b5d3eac", 0xcc, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000001dc0)=0x4, 0x0, 0x4) 01:26:16 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() waitid(0x2, r3, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r3, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r3, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r3}) waitid(0x2, r3, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r5 = syz_io_uring_complete(r4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r5) r6 = syz_io_uring_complete(r2) mq_timedsend(r6, &(0x7f0000001c80)="13ef260e5cac6f9247284e4b24e0ceb8c624fff446d9429bed6e0fb003cf70f9921b5db6e84a2c218e61041dfbfdb5ad05f58e8066912774990b26b5b23d0af79a2286a24485e68897a47340f179905e7522e73477c909ad47b066586bbc85b6124953be4ade42729d303bde7c4b1a0c525bef083127a256e97eb3815bfafdb2d0d8cddc1b7f39d2289a8de9d7bdc07dead9638bd59d61f001ebf2ebdd6e5da25f6bd78bd99da47b5d242192b4c9f26c8907ecc2459463ba3870d1092c270984f339c17a02f961917b5d3eac", 0xcc, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000001dc0)=0x4, 0x0, 0x4) 01:26:16 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) r7 = fsmount(r0, 0x1, 0x5) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000d40)=""/129) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, &(0x7f0000000f40)=0x7fffffff) 01:26:16 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/123, 0x7b}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}}, 0x4040881) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) 01:26:16 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r11, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x1b, 0x1, "d3268cdf7416178146a876831e4e74469a3f39a6a1270215ca30b16aa31facc28aafc0dd5d6e1e4f853f3563ccd3981e84de0549902ff661582a2170cf5afb38", "984765d3218b2d584039a8d96a021f1e86660e7391e839f2871bc6c4c899aa0b", [0x8, 0x6]}) syz_io_uring_submit(r10, 0x0, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0xe, {0x0, r8}, 0x5, 0x0, 0x0, {0x0, 0x0, r9}}, 0xa6) 01:26:16 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) r10 = fsmount(r0, 0x1, 0x8) process_madvise(r10, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r11, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:16 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) gettid() setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000006a40)=0x101, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 01:26:16 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r11) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002040)='/dev/bsg\x00', 0x0, r12) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002080)=0x7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000004, 0x810, 0xffffffffffffffff, 0x0) 01:26:16 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 01:26:16 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r11) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002040)='/dev/bsg\x00', 0x0, r12) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000002080)=0x7) 01:26:16 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() waitid(0x2, r3, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r3, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r3, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r3}) waitid(0x2, r3, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r5 = syz_io_uring_complete(r4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r5) r6 = syz_io_uring_complete(r2) mq_timedsend(r6, &(0x7f0000001c80)="13ef260e5cac6f9247284e4b24e0ceb8c624fff446d9429bed6e0fb003cf70f9921b5db6e84a2c218e61041dfbfdb5ad05f58e8066912774990b26b5b23d0af79a2286a24485e68897a47340f179905e7522e73477c909ad47b066586bbc85b6124953be4ade42729d303bde7c4b1a0c525bef083127a256e97eb3815bfafdb2d0d8cddc1b7f39d2289a8de9d7bdc07dead9638bd59d61f001ebf2ebdd6e5da25f6bd78bd99da47b5d242192b4c9f26c8907ecc2459463ba3870d1092c270984f339c17a02f961917b5d3eac", 0xcc, 0x40, 0x0) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:16 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r7, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r11 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r11) sendmsg$FOU_CMD_ADD(r10, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f0000002040)='/dev/bsg\x00', 0x0, r12) 01:26:16 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r2) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r5 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r6 = pidfd_getfd(r0, r3, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000a00)=""/180) r7 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r7) r8 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000000b80)=""/215) r9 = fsmount(r0, 0x1, 0x8) process_madvise(r9, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:16 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) r7 = fsmount(r0, 0x1, 0x5) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000d40)=""/129) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40001) 01:26:16 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = gettid() waitid(0x2, r3, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r3, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r3, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r3}) waitid(0x2, r3, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r5 = syz_io_uring_complete(r4) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r5) syz_io_uring_complete(r2) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:16 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r10) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:30 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/123, 0x7b}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}}, 0x4040881) sendmsg$BATADV_CMD_TP_METER_CANCEL(r9, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x2c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) 01:26:30 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) gettid() setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000006a40)=0x101, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 01:26:30 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004800)={&(0x7f0000004780)={0x4c, 0x0, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) 01:26:30 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r11, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x1b, 0x1, "d3268cdf7416178146a876831e4e74469a3f39a6a1270215ca30b16aa31facc28aafc0dd5d6e1e4f853f3563ccd3981e84de0549902ff661582a2170cf5afb38", "984765d3218b2d584039a8d96a021f1e86660e7391e839f2871bc6c4c899aa0b", [0x8, 0x6]}) syz_io_uring_submit(r10, 0x0, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0xe, {0x0, r8}, 0x5, 0x0, 0x0, {0x0, 0x0, r9}}, 0xa6) 01:26:30 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r2) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r5 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r6 = pidfd_getfd(r0, r3, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000a00)=""/180) r7 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r7) r8 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000000b80)=""/215) r9 = fsmount(r0, 0x1, 0x8) process_madvise(r9, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:30 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r2}) waitid(0x2, r2, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) r4 = syz_io_uring_complete(r3) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000001c40)='\x00', 0x0, r4) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:30 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) r7 = fsmount(r0, 0x1, 0x5) ioctl$EVIOCGPHYS(r7, 0x80404507, &(0x7f0000000d40)=""/129) 01:26:30 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r8, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r10) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:30 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r2 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r2) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r5 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r4, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r6 = pidfd_getfd(r0, r3, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000a00)=""/180) r7 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r7) r8 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r8, 0x80044584, &(0x7f0000000b80)=""/215) r9 = fsmount(r0, 0x1, 0x8) process_madvise(r9, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:30 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) r6 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f0000000d00)=""/25) fsmount(r0, 0x1, 0x5) 01:26:30 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r9) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:30 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0)=0x0, &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r2}) waitid(0x2, r2, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) syz_io_uring_complete(r3) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:31 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) fsmount(r0, 0x1, 0x8) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:31 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) syz_open_dev$evdev(&(0x7f0000000cc0), 0x401, 0x214400) fsmount(r0, 0x1, 0x5) 01:26:31 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r12 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r12, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r11, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x1b, 0x1, "d3268cdf7416178146a876831e4e74469a3f39a6a1270215ca30b16aa31facc28aafc0dd5d6e1e4f853f3563ccd3981e84de0549902ff661582a2170cf5afb38", "984765d3218b2d584039a8d96a021f1e86660e7391e839f2871bc6c4c899aa0b", [0x8, 0x6]}) syz_io_uring_submit(r10, 0x0, &(0x7f00000014c0)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd=r3, 0xe, {0x0, r8}, 0x5, 0x0, 0x0, {0x0, 0x0, r9}}, 0xa6) 01:26:31 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r9) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:31 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/123, 0x7b}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x5c, r9, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x5c}}, 0x4040881) 01:26:31 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 01:26:31 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) gettid() setsockopt$bt_hci_HCI_TIME_STAMP(r4, 0x0, 0x3, &(0x7f0000006a40)=0x101, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) 01:26:31 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0), &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r2}) waitid(0x2, r2, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000001bc0)={0x3ff, 0x5, 0xfe7, 0x6}, &(0x7f0000001c00)) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:31 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) fsmount(r0, 0x1, 0x8) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:45 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0), &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r2}) waitid(0x2, r2, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:45 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) r5 = pidfd_open(0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r5) fsmount(r0, 0x1, 0x5) 01:26:45 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) gettid() mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) 01:26:45 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) recvmsg$unix(r2, &(0x7f0000000d80)={&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000ac0)=""/237, 0xed}, {&(0x7f0000000bc0)=""/123, 0x7b}], 0x2, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x40000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) 01:26:45 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) fsmount(r0, 0x1, 0x8) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:45 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r8, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000001400)={0x0, {}, 0x0, {}, 0x5, 0xa, 0x1b, 0x1, "d3268cdf7416178146a876831e4e74469a3f39a6a1270215ca30b16aa31facc28aafc0dd5d6e1e4f853f3563ccd3981e84de0549902ff661582a2170cf5afb38", "984765d3218b2d584039a8d96a021f1e86660e7391e839f2871bc6c4c899aa0b", [0x8, 0x6]}) 01:26:45 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 01:26:45 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r6, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r9) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000001e40)='.\x00', &(0x7f0000001e80)="8fed7272f7c889ff6a6c1c92fdb9e5937f54d17be55fc3d7bf767e9ceada2dcefd7efaef4aa588b7dacdd4a2834be83f7a17d92ae3a5e3fe11fa055ea93cd575387d5e428a590b31ee54d1a0ca30f9e2de4779a070611252e67a76a32e0c07c36e967609bac21aa41116031238e2ad76867ef8f64639f4d68fd8032ed93f0ed1dd121cd140bf1843", 0x88) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:45 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:45 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) pidfd_open(0x0, 0x0) fsmount(r0, 0x1, 0x5) 01:26:45 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0), &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r2}) waitid(0x2, r2, &(0x7f0000001a80), 0x4, &(0x7f0000001b00)) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:45 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r9) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) [ 187.825024] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 187.825232] Bluetooth: hci4: command 0x0406 tx timeout [ 187.825660] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.826463] Bluetooth: hci2: command 0x0406 tx timeout [ 187.827020] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.827030] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 187.827795] Bluetooth: hci1: command 0x0406 tx timeout [ 187.828422] Call Trace: [ 187.830546] Bluetooth: hci3: command 0x0406 tx timeout [ 187.830841] [ 187.830855] __schedule+0x893/0x2470 [ 187.831703] Bluetooth: hci0: command 0x0406 tx timeout [ 187.831994] ? io_schedule_timeout+0x150/0x150 [ 187.832015] ? do_raw_spin_lock+0x121/0x260 [ 187.832443] Bluetooth: hci7: command 0x0406 tx timeout [ 187.832664] ? rwlock_bug.part.0+0x90/0x90 [ 187.833657] Bluetooth: hci6: command 0x0406 tx timeout [ 187.833927] schedule+0xda/0x1b0 [ 187.836022] rescuer_thread+0x851/0xdb0 [ 187.836339] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.836700] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.837121] ? lockdep_hardirqs_on+0x79/0x100 [ 187.837457] ? worker_thread+0x1260/0x1260 [ 187.837768] kthread+0x2ed/0x3a0 [ 187.838043] ? kthread_complete_and_exit+0x40/0x40 [ 187.838409] ret_from_fork+0x22/0x30 [ 187.838697] [ 187.838879] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 187.839363] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.839743] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.840298] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 187.840888] Call Trace: [ 187.841107] [ 187.841278] __schedule+0x893/0x2470 [ 187.841561] ? io_schedule_timeout+0x150/0x150 [ 187.841897] ? do_raw_spin_lock+0x121/0x260 [ 187.842234] ? rwlock_bug.part.0+0x90/0x90 [ 187.842552] schedule+0xda/0x1b0 [ 187.842805] rescuer_thread+0x851/0xdb0 [ 187.843120] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.843490] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.843859] ? lockdep_hardirqs_on+0x79/0x100 [ 187.844211] ? worker_thread+0x1260/0x1260 [ 187.844521] kthread+0x2ed/0x3a0 [ 187.844771] ? kthread_complete_and_exit+0x40/0x40 [ 187.845164] ret_from_fork+0x22/0x30 [ 187.845464] [ 187.845645] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 187.846152] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.846552] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.847127] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 187.847752] Call Trace: [ 187.847950] [ 187.848151] __schedule+0x893/0x2470 [ 187.848444] ? io_schedule_timeout+0x150/0x150 [ 187.848793] ? do_raw_spin_lock+0x121/0x260 [ 187.849158] ? rwlock_bug.part.0+0x90/0x90 [ 187.849491] schedule+0xda/0x1b0 [ 187.849753] rescuer_thread+0x851/0xdb0 [ 187.850076] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.850451] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.850827] ? lockdep_hardirqs_on+0x79/0x100 [ 187.851197] ? worker_thread+0x1260/0x1260 [ 187.851521] kthread+0x2ed/0x3a0 [ 187.851789] ? kthread_complete_and_exit+0x40/0x40 [ 187.852184] ret_from_fork+0x22/0x30 [ 187.852487] [ 187.852663] INFO: task netns:6 blocked for more than 143 seconds. [ 187.853143] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.853548] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.854148] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 187.854768] Call Trace: [ 187.854982] [ 187.855165] __schedule+0x893/0x2470 [ 187.855460] ? io_schedule_timeout+0x150/0x150 [ 187.855807] ? do_raw_spin_lock+0x121/0x260 [ 187.856161] ? rwlock_bug.part.0+0x90/0x90 [ 187.856491] schedule+0xda/0x1b0 [ 187.856758] rescuer_thread+0x851/0xdb0 [ 187.857099] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.857485] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.857872] ? lockdep_hardirqs_on+0x79/0x100 [ 187.858236] ? worker_thread+0x1260/0x1260 [ 187.858561] kthread+0x2ed/0x3a0 [ 187.858821] ? kthread_complete_and_exit+0x40/0x40 [ 187.859225] ret_from_fork+0x22/0x30 [ 187.859530] [ 187.859708] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 187.860241] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.860631] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.861232] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 187.861860] Workqueue: 0x0 (events_highpri) [ 187.862227] Call Trace: [ 187.862426] [ 187.862609] __schedule+0x893/0x2470 [ 187.862902] ? io_schedule_timeout+0x150/0x150 [ 187.863295] schedule+0xda/0x1b0 [ 187.863566] worker_thread+0x15f/0x1260 [ 187.863888] ? process_one_work+0x16a0/0x16a0 [ 187.864263] kthread+0x2ed/0x3a0 [ 187.864530] ? kthread_complete_and_exit+0x40/0x40 [ 187.864903] ret_from_fork+0x22/0x30 [ 187.865234] [ 187.865425] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 187.865929] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.866344] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.866917] task:mm_percpu_wq state:I stack:30176 pid:10 ppid:2 flags:0x00004000 [ 187.867567] Call Trace: [ 187.867771] [ 187.867954] __schedule+0x893/0x2470 [ 187.868274] ? io_schedule_timeout+0x150/0x150 [ 187.868622] ? do_raw_spin_lock+0x121/0x260 [ 187.868954] ? rwlock_bug.part.0+0x90/0x90 [ 187.869331] schedule+0xda/0x1b0 [ 187.869596] rescuer_thread+0x851/0xdb0 [ 187.869914] ? worker_thread+0x1260/0x1260 [ 187.870283] kthread+0x2ed/0x3a0 [ 187.870551] ? kthread_complete_and_exit+0x40/0x40 [ 187.870924] ret_from_fork+0x22/0x30 [ 187.871246] [ 187.871431] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 187.871951] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.872375] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.872940] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 187.873592] Call Trace: [ 187.873790] [ 187.873992] __schedule+0x893/0x2470 [ 187.874289] ? io_schedule_timeout+0x150/0x150 [ 187.874640] ? mark_held_locks+0x9e/0xe0 [ 187.874951] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.875363] schedule+0xda/0x1b0 [ 187.875625] rcu_tasks_one_gp+0x3db/0xc10 [ 187.875987] rcu_tasks_kthread+0x80/0xa0 [ 187.876296] ? rcu_tasks_postscan+0x10/0x10 [ 187.876628] kthread+0x2ed/0x3a0 [ 187.876890] ? kthread_complete_and_exit+0x40/0x40 [ 187.877304] ret_from_fork+0x22/0x30 [ 187.877613] [ 187.877798] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 187.878320] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.878719] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.879304] task:kworker/1:0 state:I stack:28952 pid:20 ppid:2 flags:0x00004000 [ 187.879930] Workqueue: 0x0 (rcu_gp) [ 187.880242] Call Trace: [ 187.880443] [ 187.880625] __schedule+0x893/0x2470 [ 187.880921] ? io_schedule_timeout+0x150/0x150 [ 187.881312] schedule+0xda/0x1b0 [ 187.881579] worker_thread+0x15f/0x1260 [ 187.881892] ? process_one_work+0x16a0/0x16a0 [ 187.882259] kthread+0x2ed/0x3a0 [ 187.882523] ? kthread_complete_and_exit+0x40/0x40 [ 187.882896] ret_from_fork+0x22/0x30 [ 187.883224] [ 187.883404] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 187.883892] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.884308] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.884876] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 187.885524] Workqueue: 0x0 (kblockd) [ 187.885825] Call Trace: [ 187.886049] [ 187.886233] __schedule+0x893/0x2470 [ 187.886524] ? io_schedule_timeout+0x150/0x150 [ 187.886886] schedule+0xda/0x1b0 [ 187.887176] worker_thread+0x15f/0x1260 [ 187.887496] ? process_one_work+0x16a0/0x16a0 [ 187.887849] kthread+0x2ed/0x3a0 [ 187.888139] ? kthread_complete_and_exit+0x40/0x40 [ 187.888519] ret_from_fork+0x22/0x30 [ 187.888817] [ 187.889025] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 187.889534] Not tainted 6.0.0-rc7-next-20220930 #1 [ 187.889926] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 187.890523] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 187.891171] Call Trace: [ 187.891366] [ 187.891544] __schedule+0x893/0x2470 [ 187.891836] ? io_schedule_timeout+0x150/0x150 [ 187.892218] ? do_raw_spin_lock+0x121/0x260 [ 187.892549] ? rwlock_bug.part.0+0x90/0x90 [ 187.892878] schedule+0xda/0x1b0 [ 187.893177] rescuer_thread+0x851/0xdb0 [ 187.893486] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.893867] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 187.894269] ? lockdep_hardirqs_on+0x79/0x100 [ 187.894619] ? worker_thread+0x1260/0x1260 [ 187.894946] kthread+0x2ed/0x3a0 [ 187.895238] ? kthread_complete_and_exit+0x40/0x40 [ 187.895616] ret_from_fork+0x22/0x30 [ 187.895920] [ 187.896183] [ 187.896183] Showing all locks held in the system: [ 187.896613] 1 lock held by rcu_tasks_kthre/11: [ 187.896919] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 187.897614] 1 lock held by khungtaskd/25: [ 187.897919] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 187.898638] 1 lock held by systemd-journal/111: [ 187.899011] 1 lock held by in:imklog/211: [ 187.899315] #0: ffff88800e842fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 187.899994] 2 locks held by syz-executor/4268: [ 187.900330] [ 187.900463] ============================================= [ 187.900463] 01:26:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:58 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x4, 0x6f, 0xff, 0x1, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x8, 0x40, 0x4c4ac1e2, 0x1}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xef0}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4000) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x80000001}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xf909}]}, 0x54}, 0x1, 0x0, 0x0, 0x20080044}, 0x4040010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000380)=@flushsa={0x1d0, 0x1c, 0x300, 0x70bd29, 0x25dfdbff, {0x2b}, [@tfcpad={0x8, 0x16, 0x2}, @algo_auth_trunc={0x85, 0x14, {{'hmac(sha1-ce)\x00'}, 0x1c8, 0x40, "0a3627b0b91f15fc76da31b92e1338d538999f845870e6e6a993df7121b4029da1b163a07844d48b5b90d466c6beea41c3e3be8b8ddc8d50a5"}}, @algo_aead={0x12c, 0x12, {{'rfc7539(cbc-aes-ce,sha512-arm64)\x00'}, 0x700, 0x200, "e082d9fb2bc752589b315e365e1e1fe0b16af93532b9eac2e8dfa7b9858466e85a1f62d5cd85a627630586859419c5b1e52df12b1b734a597d5050c436670f1ef4bcbcbe22a8bbd1e4102f2c51b1fd82ab6c4a46a0296d5173b8ee44348436ac38c9675d238b7ee23031b00dcb8add0d5d7dc2397e8a28ae6b6ed4e3f81478e373fae4e6c91aae9e527182289078d50606bee71626664769c4c4e71f6fd2c142de038ef4ceca74aabc2fbeafd3161b521336c4d754965ffa7f8dae48cbd11f1faa3d0fb460f2e9d0492890bd70ad41c196a7b2b03c5dea11736c9c6b4f70498d"}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20}, 0x4040800) sync() r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001340)={&(0x7f0000000680)={0xc94, r2, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0xc54, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xef}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xffff50c3, @private0, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b125e565152c7d56dcb447117db0613b73c55dfdf5e43a61486da34209e8e584"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}]}, {0x140, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2b400aef271ac7cacb983eaaf7afc5897f3ab502ffd38089727eeb920b03a29"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xa0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xbc0, @mcast1, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffc00, @remote, 0xfffffffb}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xb55, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2211cf44}}]}, {0x504, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x3f, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_ALLOWEDIPS={0x494, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x33}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0x40}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8001}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1a4223e7e5d5fa0161326332dce5eaf86fa118ffd42ec0b0525ddaede76b0b23"}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x7, @local, 0x8c8}}]}, {0x390, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d74573423dc7f9f845b7a04a60f3a3a473b3beca738390c10ba8187cf6e6549"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @remote, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}]}]}, 0xc94}}, 0x80) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0), 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xc4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x80000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000025c0)=[{&(0x7f00000014c0)=""/133, 0x85}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/38, 0x26}], 0x3, &(0x7f0000002600)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x168}, 0x40000002) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002800), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002880)={&(0x7f0000002840)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000011}, 0x18c4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000002940)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000002a40)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002a00)={&(0x7f0000002980)={0x44, r0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3f2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) sendmsg$FOU_CMD_GET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) r10 = syz_io_uring_complete(0x0) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f0000004280)={&(0x7f00000041c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004240)={&(0x7f0000004200)={0x3c, r0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffffffff}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x2}]}, 0x3c}}, 0x44000090) recvmsg$unix(r6, &(0x7f00000045c0)={&(0x7f00000042c0)=@abs, 0x6e, &(0x7f00000044c0)=[{&(0x7f0000004340)=""/128, 0x80}, {&(0x7f00000043c0)=""/209, 0xd1}], 0x2, &(0x7f0000004500)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x60000000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f00000046c0)={&(0x7f0000004600)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004680)={&(0x7f0000004640)={0x38, r0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 01:26:58 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r9 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r9) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:58 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0), &(0x7f0000001a00)) mq_notify(0xffffffffffffffff, &(0x7f0000001a40)={0x0, 0x1b, 0x0, @tid=r2}) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) 01:26:58 executing program 0: r0 = syz_io_uring_complete(0x0) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xf57}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0x800) r1 = fsmount(r0, 0x1, 0x5) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40004}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x28, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000047}, 0x2004c000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x401}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40810}, 0x1000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x104, &(0x7f0000000b80)=0x101, 0x0, 0x4) r3 = pidfd_getfd(r1, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmsg$unix(r3, &(0x7f0000000fc0)={&(0x7f0000000cc0), 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/89, 0x59}, {&(0x7f0000000dc0)=""/45, 0x2d}, {&(0x7f0000000e00)=""/18, 0x12}, {&(0x7f0000000e40)=""/39, 0x27}], 0x4, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}, 0x40000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r6, 0x0) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000001000)=""/4) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r7) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x67}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x70}]}, 0x64}, 0x1, 0x0, 0x0, 0x4800}, 0x8040) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f00000012c0), 0x200102, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r9, &(0x7f00000013c0)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x34, r8, 0x1, 0x3, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 01:26:58 executing program 3: sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000080) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x800}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0xc051) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x401}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4880}, 0x40) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x34}}, 0x40005) socketpair(0x1d, 0x3, 0x36, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000540), r0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl2\x00', r1, 0x29, 0x80, 0x4, 0x10001, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x7, 0x41, 0x9}}) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x64, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x64}}, 0x40004) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x40, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x2400c801) write$bt_hci(r3, &(0x7f0000000880)={0x1, @pin_code_reply={{0x40d, 0x17}, {@none, 0x80, "3d7eb3be8946e7fbf3fe2bafab7438e8"}}}, 0x1b) syz_io_uring_submit(0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r3, 0x400000000, 0x0, 0x1, 0x2}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x24, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x43c}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c800}, 0x804) syz_genetlink_get_family_id$batadv(&(0x7f0000000e00), r0) 01:26:58 executing program 4: r0 = pidfd_open(0xffffffffffffffff, 0x0) process_madvise(r0, &(0x7f0000000280)=[{&(0x7f0000000000)="7a5a4c40e9b1840470535e1c2c57f1d261112b88c836b62ed85f99e7b5d0d9ab01b962739d3aae6aec4b929673a0bc121fc1a7cfeba43b30be5930501ff7906b690c089687bfa2b75b0a446b726f3bfdffe04b77d0b967b1530afeebb6b82a8efa1b9cbaba13655f2fdc5201cfdae9660f23", 0x72}, {&(0x7f0000000080)="682f745befac4cfc9042b9362b145eeb0e958cc7e8cd2e24da31a554e147585507ed82bc23d817fd93afc63028f506fa41a462b2d0a34ab19b1b0c52ff2006ce3745d17a26925c862fe1d563a17489", 0x4f}, {&(0x7f0000000100)="f7e834cef7d300a5a383627def9af84c996d4c79c9bbbaf97adcea6c43ab1d7327480b6557d683687e454180d5d495d2aab6aa321e43e8b4ad732f797b383b8c508935c5066bb7ed0efb8612e0a6c898c5344862c7998a08", 0x58}, {&(0x7f0000000180)="2b2c97b439babc404946b2a4703cf21aef7d539422f5994d20fd3aed33a2aaee81f891f75c9a38f8e9a54aca6697ac9b5e4255cdd67d8d43832ef75d0917401c98a55a1bbd0d45274e53fee2242b02c39265c9c7aaaf6a3cd4910eb6a1b9180e3ba7804086dae6f484f249155cf2a0f515c60c80f45d3245926ba77c1282468d2853c692ff4d47fa392ff44ff3a710844da92a28391a5c3a6c38cf24f5b01994f9f47e4f6f56f5b0d092dea51624ab96e1e140eabddcf9c4511c133a5dd5e2984135b3bb0d6b689d2440709bf6c64fa6b9868977921e8a064540dae61ebcaf9c3a7ab69869b513672bb29c974e523f", 0xef}], 0x4, 0x12, 0x0) r1 = gettid() pidfd_open(r1, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f00000002c0)=""/11) process_vm_writev(r1, &(0x7f0000001380)=[{&(0x7f0000000300)=""/18, 0x12}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)}], 0x3, &(0x7f0000003600)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/207, 0xcf}, {&(0x7f00000024c0)=""/54, 0x36}, {&(0x7f0000002500)=""/124, 0x7c}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/123, 0x7b}], 0x6, 0x0) process_vm_writev(r1, &(0x7f0000004a40)=[{&(0x7f0000003680)=""/138, 0x8a}, {&(0x7f0000003740)=""/3, 0x3}, {&(0x7f0000003780)=""/61, 0x3d}, {&(0x7f00000037c0)=""/248, 0xf8}, {&(0x7f00000038c0)=""/243, 0xf3}, {&(0x7f00000039c0)=""/70, 0x46}, {&(0x7f0000003a40)=""/4096, 0x1000}], 0x7, &(0x7f0000004dc0)=[{&(0x7f0000004ac0)=""/107, 0x6b}, {&(0x7f0000004b40)=""/165, 0xa5}, {&(0x7f0000004c00)=""/16, 0x10}, {&(0x7f0000004c40)=""/108, 0x6c}, {&(0x7f0000004cc0)=""/3, 0x3}, {&(0x7f0000004d00)=""/142, 0x8e}], 0x6, 0x0) process_mrelease(r0, 0x0) r2 = fsmount(0xffffffffffffffff, 0x0, 0x3) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000004f80)=""/4096) getresuid(&(0x7f0000005fc0), &(0x7f0000006000)=0x0, &(0x7f0000006040)) sendmsg$nl_xfrm(r2, &(0x7f0000006280)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000006240)={&(0x7f0000006080)=@expire={0x1b4, 0x18, 0x2, 0x70bd2a, 0x25dfdbff, {{{@in6=@remote, @in=@broadcast, 0x4e22, 0x101, 0x4e20, 0x4, 0xa, 0xc0, 0x20, 0x2f, 0x0, r3}, {@in6=@private1, 0x4d5, 0x13}, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, {0x101, 0x3, 0x3, 0x3, 0x0, 0x51b, 0x400, 0x9}, {0x9, 0xd3, 0x6, 0x1ff}, {0xffff, 0xfffff5fe, 0x70000000}, 0x70bd27, 0x3500, 0xa, 0x4, 0xb0, 0x22}, 0xf8}, [@XFRMA_SET_MARK={0x8, 0x1d, 0xfff}, @extra_flags={0x8, 0x18, 0x74c0}, @replay_thresh={0x8, 0xb, 0x9}, @algo_comp={0x7a, 0x3, {{'lzs\x00'}, 0x190, "99f209c8263fdf7eb82a3cee85c5c870a971c7c772ab3ceed7dc0248367f5b67201bd1a60b05b5c5215920536095ac38a157"}}, @address_filter={0x28, 0x1a, {@in6=@remote, @in=@multicast1, 0xa, 0x3f, 0xff}}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x800) socket$inet6(0xa, 0x80000, 0x2) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f00000062c0), 0x4402, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000006400)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000063c0)={&(0x7f0000006340)={0x44, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="402878c8062f"}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x77}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x8010) recvmsg$unix(r4, &(0x7f0000006a00)={&(0x7f0000006440)=@abs, 0x6e, &(0x7f0000006980)=[{&(0x7f00000064c0)=""/176, 0xb0}, {&(0x7f0000006580)=""/155, 0x9b}, {&(0x7f0000006640)=""/92, 0x5c}, {&(0x7f00000066c0)=""/108, 0x6c}, {&(0x7f0000006740)=""/184, 0xb8}, {&(0x7f0000006800)=""/140, 0x8c}, {&(0x7f00000068c0)=""/144, 0x90}], 0x7}, 0x40012001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r4, 0x0) 01:26:58 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000c80)={'syztnl2\x00', &(0x7f0000000b80)={'syztnl2\x00', r4, 0x8, 0x40, 0x1, 0x5, {{0x2c, 0x4, 0x0, 0x39, 0xb0, 0x65, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010100, @local, {[@noop, @timestamp_addr={0x44, 0x24, 0x78, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x23}, 0xffffff80}, {@local, 0x6}, {@rand_addr=0x64010100}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x3000}]}, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x2, [{@broadcast, 0x7ff}]}, @noop, @end, @cipso={0x86, 0x5d, 0x0, [{0x1, 0x4, "e26e"}, {0x1, 0x3, '['}, {0x0, 0xf, "30f13af6947c6528b202847eea"}, {0x0, 0x4, "fa87"}, {0x6, 0x8, "a1cb59129e32"}, {0x1, 0xe, "87a0b2fc04d8509784862e81"}, {0x7, 0x12, "284994494a05fc27d9f11810a8179429"}, {0x7, 0xd, "35c652855d3ad92acce939"}, {0x2, 0x8, "e682dafa08b6"}]}, @timestamp_addr={0x44, 0xc, 0xb6, 0x1, 0x1, [{@broadcast, 0xa893}]}]}}}}}) fsmount(r0, 0x1, 0x5) 01:26:58 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f0000001cc0)='\x00', 0x0, r8) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:58 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000b40)={'syztnl1\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x6b, 0xff, 0x6, 0x41, @private2, @loopback, 0x40, 0x20, 0x24, 0x8}}) fsmount(r0, 0x1, 0x5) 01:26:58 executing program 2: recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/60, 0x3c}, {&(0x7f0000000300)=""/158, 0x9e}, {&(0x7f00000003c0)=""/138, 0x8a}], 0x6, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0x102) r3 = syz_io_uring_complete(0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f00000005c0)='W\x00', &(0x7f0000000600)='./file0\x00', r3) socketpair(0x22, 0xbb06ba822ee579d, 0x3, &(0x7f0000000640)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f0000000700)={'tunl0\x00', 0x0, 0x742587bbd0bcb96, 0x8000, 0x2, 0x3, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x65, 0x0, 0xca, 0x4, 0x0, @multicast2, @empty, {[@end]}}}}}) sendmsg$FOU_CMD_GET(r4, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = fspick(r0, &(0x7f0000000840)='./file0\x00', 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000880)={'ip_vti0\x00', r5, 0x8, 0x8000, 0x5, 0x5, {{0x10, 0x4, 0x3, 0x3d, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x2c, 0x49, 0x0, 0x3, [0x4, 0x0, 0x5e, 0x3ff, 0x2, 0x4, 0x8, 0x61e, 0x5, 0x6]}]}}}}}) fstat(r0, &(0x7f0000000940)) ioctl$EVIOCSFF(r3, 0x40304580, &(0x7f00000009c0)={0x56, 0x5e2, 0xd427, {0x8, 0x2}, {0x4, 0x9}, @ramp={0x2, 0x96c, {0x20, 0x81, 0x8, 0x4}}}) r7 = pidfd_getfd(r0, r4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000a00)=""/180) r8 = fsmount(r0, 0x1, 0x0) fsconfig$FSCONFIG_SET_PATH(r6, 0x3, &(0x7f0000000ac0)='*\x00', &(0x7f0000000b00)='./file0\x00', r8) r9 = syz_open_dev$evdev(&(0x7f0000000b40), 0x20, 0x2) ioctl$EVIOCGEFFECTS(r9, 0x80044584, &(0x7f0000000b80)=""/215) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="7b53072a3ac48b168a31ab6d67a34efb8695f6eae3c16dd2007252b041dcdb0b0dfa1e2cb01ab70446cd62748c1d5f3a6ee92f42ff9150206c22b3214acd0265d7fc6a9457c22d540d228c91174fa107d9c5ed5068177fd1918c8ca652745f0f9362369e24d44931e4d9b7c77e5233c416f354977914ed6aab2a5d7757481e7db45f9d3c75622144387b9b9a0cf0c7cce490bd2cffe162f4b680b05948a64f", 0x9f}], 0x1, 0x16, 0x0) syz_io_uring_setup(0x3713, &(0x7f0000000d80)={0x0, 0x1f06, 0x20, 0x2, 0x33b, 0x0, r1}, &(0x7f0000003000/0x2000)=nil, &(0x7f0000003000/0x1000)=nil, &(0x7f0000000e00), &(0x7f0000000e40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000ec0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x1, 0x1, 0x1}, 0x8) 01:26:58 executing program 1: fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000000)='\x00', 0x0, 0xffffffffffffffff) r0 = fsmount(0xffffffffffffffff, 0x0, 0xa) r1 = fsmount(r0, 0x0, 0x83) r2 = pidfd_getfd(r1, r0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000040)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/195) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000018c0)={&(0x7f0000000200), 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/49, 0x31}, {&(0x7f00000002c0)=""/99, 0x63}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/136, 0x88}, {&(0x7f00000014c0)=""/71, 0x47}, {&(0x7f0000001540)=""/147, 0x93}, {&(0x7f0000001600)=""/168, 0xa8}], 0x8, &(0x7f0000001740)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x40010001) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000001900)=""/156) recvmsg$unix(r4, &(0x7f0000001c80)={&(0x7f00000019c0), 0x6e, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/74, 0x4a}, {&(0x7f0000001ac0)=""/57, 0x39}, {&(0x7f0000001b00)=""/73, 0x49}], 0x3, &(0x7f0000001bc0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x40002040) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002000)={'gre0\x00', &(0x7f0000001f40)={'tunl0\x00', 0x0, 0x80, 0x8000, 0x2, 0x2, {{0x25, 0x4, 0x2, 0x8, 0x94, 0x68, 0x0, 0x1, 0x4, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x15}, {[@end, @timestamp_addr={0x44, 0xc, 0x14, 0x1, 0x2, [{@private=0xa010101, 0x2}]}, @ssrr={0x89, 0x2b, 0xb6, [@dev={0xac, 0x14, 0x14, 0x29}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @empty, @local, @private=0xa010100, @multicast2, @multicast1, @multicast2, @rand_addr=0x64010101]}, @timestamp={0x44, 0x10, 0x6d, 0x0, 0xa, [0x4, 0x4, 0x40]}, @timestamp_prespec={0x44, 0x14, 0x45, 0x3, 0x8, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}, @noop, @timestamp_addr={0x44, 0x14, 0xae, 0x1, 0x4, [{@private=0xa010102}, {@remote, 0xd7b}]}, @timestamp={0x44, 0xc, 0x40, 0x0, 0x9, [0x1, 0xb5a]}]}}}}}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 01:26:58 executing program 5: r0 = syz_io_uring_complete(0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, {}, 0x0, {}, 0x7, 0x0, 0x1, 0x4, "7618c08df4bd4357ef134122fe4eef938ca5bae5ffb54bbd2306e9a5db86a75f9c118dca7a02d5911e68afd28ccee0015f202bc4a5c33581a62c4497d8aa841d", "9b4d26232f8146f7e50ee466ff38e8ce1b1777d18cba6f249f34d37655a68455", [0x100000000, 0x2]}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffe1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000845}, 0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) r2 = syz_open_dev$evdev(&(0x7f0000000300), 0x2, 0x8000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000340)=""/94) r3 = syz_open_dev$evdev(&(0x7f00000003c0), 0xfff, 0x802) ioctl$EVIOCGREP(r3, 0x80084503, &(0x7f0000000400)=""/74) fsmount(r0, 0x1, 0x5) 01:26:58 executing program 7: r0 = io_uring_setup(0x19a, &(0x7f0000000000)={0x0, 0x6aca, 0x2, 0x2, 0x32e}) r1 = syz_io_uring_setup(0x39e2, &(0x7f0000000080)={0x0, 0xa31, 0x2, 0x2, 0x267, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000140)) r2 = gettid() waitid(0x2, r2, &(0x7f0000001640), 0x1, &(0x7f00000016c0)) ptrace$cont(0x2e, r2, 0xfffffffffffffff7, 0xfffffffffffff000) waitid(0x1, 0x0, &(0x7f0000001780), 0x4, &(0x7f0000001800)) sched_rr_get_interval(r2, &(0x7f00000018c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x10, r0, 0x8000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000001900)={0xf9}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x79e1, &(0x7f0000001940)={0x0, 0x1686, 0x10, 0x1, 0x11b, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000019c0), &(0x7f0000001a00)) syz_open_dev$evdev(&(0x7f0000001d80), 0x62abf78d, 0x202040) [ 196.017181] Bluetooth: hci5: command 0x0406 tx timeout VM DIAGNOSIS: 01:26:57 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888008901ac0 RSI=ffffffff812c6586 RDI=0000000000000001 RBP=ffff88800902fc30 RSP=ffff88800902fbf8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000000b R13=ffff88803613d040 R14=0000000000000200 R15=ffff88800902fc80 RIP=ffffffff812c6588 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562247a01648 CR3=00000000177f0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 49464e4f43534624 6769666e6f637366 YMM05=0000000000000000 0000000000000000 30202c65746f6d65 72407b202c7d3230 YMM06=0000000000000000 0000000000000000 7473656d69744020 2c7d5d7d62376478 YMM07=0000000000000000 0000000000000000 202c637830202c34 3478307b3d706d61 YMM08=0000000000000000 0000000000000000 202c397830202c30 7830202c30347830 YMM09=0000000000000000 0000000000000000 7d7d5d7d5d613562 7830202c3178305b YMM10=0000000000000000 0000000000000000 656e5f74696e695f 7a79730a297d7d7d YMM11=0000000000000000 0000000000000000 286963685f746224 74656b636f735f74 YMM12=0000000000000000 0000000000000000 0a29317830202c33 7830202c66317830 YMM13=0000000000000000 0000000000000000 6e756f6d7366203d 2030720a29666666 YMM14=0000000000000000 0000000000000000 6666666666666666 6666666678302874 YMM15=0000000000000000 0000000000000000 0a29617830202c30 7830202c66666666 info registers vcpu 1 RAX=0000000000000000 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff8880361bf748 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb149 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007febb73d1650 CR3=00000000189d4000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 000c016c6c6f502e 726567616e614d0c YMM02=0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 82fdb1512c2f10e4 d1bba822bebcbcf4 YMM05=0000000000000000 0000000000000000 ac36843444eeb873 516d29a0464a6cab YMM06=0000000000000000 0000000000000000 0ddd8acb0db03130 e27e8b235d67c938 YMM07=0000000000000000 0000000000000000 e37814f8e3d46e6b ae288a7e39c27d5d YMM08=0000000000000000 0000000000000000 0ddd8acb0db03130 e27e8b235d67c938 YMM09=0000000000000000 0000000000000000 e37814f8e3d46e6b ae288a7e39c27d5d YMM10=0000000000000000 0000000000000000 06d5789028827152 9eae1ac9e6e4fa73 YMM11=0000000000000000 0000000000000000 42c1d26f1fe7c4c4 6947662616e7be06 YMM12=0000000000000000 0000000000000000 521b16d3afbe2fbc aa74cacef48e03de YMM13=0000000000000000 0000000000000000 1f1fd1cb48ae8d7f fa5f9654d7c43613 YMM14=0000000000000000 0000000000000000 c141ad70bd902849 d0e9f260b40f3daa YMM15=0000000000000000 0000000000000000 8d49704f6b9c6c73 11ea5d3cb0b2a796