Warning: Permanently added '[localhost]:47731' (ECDSA) to the list of known hosts. 2022/10/03 07:34:35 fuzzer started 2022/10/03 07:34:35 dialing manager at localhost:35095 syzkaller login: [ 37.713256] cgroup: Unknown subsys name 'net' [ 37.805911] cgroup: Unknown subsys name 'rlimit' 2022/10/03 07:34:50 syscalls: 201 2022/10/03 07:34:50 code coverage: enabled 2022/10/03 07:34:50 comparison tracing: enabled 2022/10/03 07:34:50 extra coverage: enabled 2022/10/03 07:34:50 setuid sandbox: enabled 2022/10/03 07:34:50 namespace sandbox: enabled 2022/10/03 07:34:50 Android sandbox: enabled 2022/10/03 07:34:50 fault injection: enabled 2022/10/03 07:34:50 leak checking: enabled 2022/10/03 07:34:50 net packet injection: enabled 2022/10/03 07:34:50 net device setup: enabled 2022/10/03 07:34:50 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 07:34:50 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 07:34:50 USB emulation: enabled 2022/10/03 07:34:50 hci packet injection: enabled 2022/10/03 07:34:50 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 07:34:50 802.15.4 emulation: enabled 2022/10/03 07:34:50 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 07:34:51 starting 8 fuzzer processes 07:34:51 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @can, 0x8f0, 0x0, 0x0, 0x0, 0x261, &(0x7f0000000480)='ip6gretap0\x00', 0x3, 0x6, 0x20}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040051}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0xc4) 07:34:51 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) r5 = add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f00000011c0)='batadv\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x897f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x45010}, 0x40000) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:34:51 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ec0)={0x9}, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000f00)) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20008040) 07:34:51 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x67, 0x1, {0x40, 0x3, 0x8}}, 0x14) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x47, 0x1}, 0x7) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r6, 0x0, 0x2c, &(0x7f00000009c0)="12bc6bb5d8d82656d49d9ad5d4073341ff1938d5c319b3f5f9d62786daed490ac2bfaba30811e506d3880ffe653bd2a71dbb44ef1749c48c5e0120d5cfba2ec8aa93535e6124767b4a479732059b67ce5f0e776bc7b411faf628287df2d9973eba871971e1757dd0f17fc31c021602190510432af1d69cfe3e9356b86286efecbadec1323687421ca62fa9698f2bbaff11d7ea896ca8c0", 0x97) 07:34:51 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @remote, @rand_addr=0x64010101}, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r1, 0x60e8cddf16eb20a8, 0x40, 0x1, 0x9, 0x1c, @empty, @mcast1, 0x7800, 0x700, 0x3686, 0x20}}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8000, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x57, r4, r0}, {0x3f, 0x5, 0xfff, 0x7, 0x1, 0x3, 0x3f, 0x92}, {0x6a08000000000, 0x5, 0x3}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x75a299c1c2c914ef, 0x3, 0x8, 0x7fffffff, 0x7, 0x7f}}, 0xe8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4$inet(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000007c0)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x2, 0xffff, 0x1f, 0x8, 0x3]}, &(0x7f0000000840)=0x78) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008802}, 0x40010) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000980)={0x3ff}, 0x4) bind$inet(r5, &(0x7f00000009c0)={0x2, 0x4e22, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 07:34:51 executing program 5: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x80000) r2 = accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffff25a}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80803}, 0x20000880) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000004c0)=""/177, &(0x7f0000000580)=0xb1) r5 = socket$inet(0x2, 0x5, 0x202000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)='ipvlan1\x00', 0xaa, 0x3f, 0x9}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040000}, 0x84) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x6, 0x2, 0xfd}, {0x6, 0x24, 0x1a, 0xffff, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x0, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6d, 0xff}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0xff, 0x1, 0x1, 0xf7, 0x81}, 0x1d, &(0x7f0000000880)={0x5, 0xf, 0x1d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x1, 0x4e, 0x7ff, 0xf5}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xfc, &(0x7f00000008c0)=@string={0xfc, 0x3, "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"}}]}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x687100caf667ccfb, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x2004c081) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000b80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbc9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) [ 53.231211] audit: type=1400 audit(1664782491.630:6): avc: denied { execmem } for pid=286 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 07:34:51 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) write$P9_RLERROR(r4, &(0x7f0000000600)={0xb, 0x7, 0x2, {0x2, ':$'}}, 0xb) write$P9_RXATTRWALK(r4, &(0x7f0000000640)={0xf, 0x1f, 0x1, 0x9}, 0xf) write$9p(0xffffffffffffffff, &(0x7f0000000680)="9deb07eab4176681343359449ddb459c3ec477c929b318f2afa31f53fb3059492a36c262ee0122d4d1e25f99ec42a4ae93ce3dbc4607bd45387ce0999ccea80ff8ad90a096e2faa331c2c3e00cade3d24f8c8be54938f4b0f5ea8ae2ba0799d814380122d840856f9de3e54131cc09c6d82b7d1dc8643e274ef9af6fcddb73aebae9b9ed029fe9269b731de10fda0a", 0x8f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:34:51 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3f, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x1, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x29, 0x1, 0x1, 0xfffff621, 0x0, @mcast1, @mcast2, 0x700, 0x700, 0xfff, 0x4}}) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048885) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004000}, 0x44090) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x30b, 0x7, 0x20, 0x3b, 0x2, @broadcast}, @sco={0x1f, @none}, 0x4b72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='bond_slave_0\x00', 0xffffffff, 0x3, 0x3}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0xd195, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) socketpair(0x33, 0x5, 0x800, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x81, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x2010) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x800) [ 54.473470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.476342] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.478457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.482031] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.488780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.490064] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.499648] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.524944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.531700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.534606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.543448] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.546882] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.548245] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.556665] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.587504] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.589043] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.589792] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.591341] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.593121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.594598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.596006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.597377] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.598696] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.602219] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.603760] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.604958] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.605608] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.607752] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.608864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.610262] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.611559] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.612727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.617328] Bluetooth: hci4: HCI_REQ-0x0c1a [ 54.622271] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.624092] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.670566] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.679434] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.683456] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.687383] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.691758] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.694756] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.695805] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.702066] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.703546] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.708270] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.711742] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.713002] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.714933] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.720634] Bluetooth: hci7: HCI_REQ-0x0c1a [ 56.553481] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 56.554763] Bluetooth: hci0: command 0x0409 tx timeout [ 56.617318] Bluetooth: hci2: command 0x0409 tx timeout [ 56.681295] Bluetooth: hci3: command 0x0409 tx timeout [ 56.681325] Bluetooth: hci5: command 0x0409 tx timeout [ 56.682069] Bluetooth: hci4: command 0x0409 tx timeout [ 56.746275] Bluetooth: hci6: command 0x0409 tx timeout [ 56.746352] Bluetooth: hci7: command 0x0409 tx timeout [ 58.601246] Bluetooth: hci0: command 0x041b tx timeout [ 58.665268] Bluetooth: hci2: command 0x041b tx timeout [ 58.729265] Bluetooth: hci4: command 0x041b tx timeout [ 58.729314] Bluetooth: hci5: command 0x041b tx timeout [ 58.729736] Bluetooth: hci3: command 0x041b tx timeout [ 58.793250] Bluetooth: hci6: command 0x041b tx timeout [ 58.793339] Bluetooth: hci7: command 0x041b tx timeout [ 59.103889] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 59.108897] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 59.116788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 59.128433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 59.130671] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 59.133714] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.139156] Bluetooth: hci1: HCI_REQ-0x0c1a [ 60.650247] Bluetooth: hci0: command 0x040f tx timeout [ 60.713251] Bluetooth: hci2: command 0x040f tx timeout [ 60.777273] Bluetooth: hci3: command 0x040f tx timeout [ 60.778589] Bluetooth: hci5: command 0x040f tx timeout [ 60.778998] Bluetooth: hci4: command 0x040f tx timeout [ 60.841291] Bluetooth: hci6: command 0x040f tx timeout [ 60.842582] Bluetooth: hci7: command 0x040f tx timeout [ 61.162301] Bluetooth: hci1: command 0x0409 tx timeout [ 62.698406] Bluetooth: hci0: command 0x0419 tx timeout [ 62.761550] Bluetooth: hci2: command 0x0419 tx timeout [ 62.826249] Bluetooth: hci4: command 0x0419 tx timeout [ 62.826695] Bluetooth: hci5: command 0x0419 tx timeout [ 62.827090] Bluetooth: hci3: command 0x0419 tx timeout [ 62.889293] Bluetooth: hci7: command 0x0419 tx timeout [ 62.889740] Bluetooth: hci6: command 0x0419 tx timeout [ 63.210712] Bluetooth: hci1: command 0x041b tx timeout [ 65.257349] Bluetooth: hci1: command 0x040f tx timeout [ 67.305422] Bluetooth: hci1: command 0x0419 tx timeout 07:35:50 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ec0)={0x9}, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000f00)) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20008040) 07:35:51 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) r5 = add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f00000011c0)='batadv\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x897f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x45010}, 0x40000) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:35:51 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) r5 = add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f00000011c0)='batadv\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x897f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x45010}, 0x40000) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:35:51 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ec0)={0x9}, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000f00)) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20008040) 07:35:51 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ec0)={0x9}, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000f00)) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x6, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x20008040) 07:35:51 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) r5 = add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f00000011c0)='batadv\x00') sendmsg$TIPC_CMD_GET_LINKS(r0, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x897f}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x45010}, 0x40000) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:35:51 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3f, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x1, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x29, 0x1, 0x1, 0xfffff621, 0x0, @mcast1, @mcast2, 0x700, 0x700, 0xfff, 0x4}}) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048885) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004000}, 0x44090) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x30b, 0x7, 0x20, 0x3b, 0x2, @broadcast}, @sco={0x1f, @none}, 0x4b72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='bond_slave_0\x00', 0xffffffff, 0x3, 0x3}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0xd195, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) socketpair(0x33, 0x5, 0x800, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x81, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x2010) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x800) 07:35:51 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ec0)={0x9}, 0x4) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000f00)) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) [ 116.225825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.229834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.234306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.238922] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.242954] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.244402] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.249538] Bluetooth: hci2: HCI_REQ-0x0c1a [ 118.314331] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 118.314350] Bluetooth: hci2: command 0x0409 tx timeout [ 118.377339] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 120.361265] Bluetooth: hci2: command 0x041b tx timeout [ 122.409275] Bluetooth: hci2: command 0x040f tx timeout [ 122.665274] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 122.729325] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 124.457303] Bluetooth: hci2: command 0x0419 tx timeout [ 124.927872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 124.930410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 124.932147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 124.935764] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 124.937811] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 124.939146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 124.943645] Bluetooth: hci3: HCI_REQ-0x0c1a [ 124.988518] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.990538] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.992971] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.998433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.002700] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.005560] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.014624] Bluetooth: hci5: HCI_REQ-0x0c1a [ 126.953306] Bluetooth: hci3: command 0x0409 tx timeout [ 127.081306] Bluetooth: hci5: command 0x0409 tx timeout [ 129.001250] Bluetooth: hci3: command 0x041b tx timeout [ 129.129273] Bluetooth: hci5: command 0x041b tx timeout [ 131.049292] Bluetooth: hci3: command 0x040f tx timeout [ 131.177332] Bluetooth: hci5: command 0x040f tx timeout [ 133.097263] Bluetooth: hci3: command 0x0419 tx timeout [ 133.225286] Bluetooth: hci5: command 0x0419 tx timeout [ 145.243427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.247987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.888406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.891869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:36 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @remote, @rand_addr=0x64010101}, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r1, 0x60e8cddf16eb20a8, 0x40, 0x1, 0x9, 0x1c, @empty, @mcast1, 0x7800, 0x700, 0x3686, 0x20}}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8000, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x57, r4, r0}, {0x3f, 0x5, 0xfff, 0x7, 0x1, 0x3, 0x3f, 0x92}, {0x6a08000000000, 0x5, 0x3}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x75a299c1c2c914ef, 0x3, 0x8, 0x7fffffff, 0x7, 0x7f}}, 0xe8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4$inet(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000007c0)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x2, 0xffff, 0x1f, 0x8, 0x3]}, &(0x7f0000000840)=0x78) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008802}, 0x40010) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000980)={0x3ff}, 0x4) bind$inet(r5, &(0x7f00000009c0)={0x2, 0x4e22, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 07:36:36 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @can, 0x8f0, 0x0, 0x0, 0x0, 0x261, &(0x7f0000000480)='ip6gretap0\x00', 0x3, 0x6, 0x20}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040051}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0xc4) 07:36:36 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) r5 = add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r5, 0x0, &(0x7f00000011c0)='batadv\x00') write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:36:36 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000ec0)={0x9}, 0x4) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) 07:36:36 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3f, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x1, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x29, 0x1, 0x1, 0xfffff621, 0x0, @mcast1, @mcast2, 0x700, 0x700, 0xfff, 0x4}}) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048885) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004000}, 0x44090) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x30b, 0x7, 0x20, 0x3b, 0x2, @broadcast}, @sco={0x1f, @none}, 0x4b72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='bond_slave_0\x00', 0xffffffff, 0x3, 0x3}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0xd195, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) socketpair(0x33, 0x5, 0x800, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x81, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x2010) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x800) 07:36:36 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) write$P9_RLERROR(r4, &(0x7f0000000600)={0xb, 0x7, 0x2, {0x2, ':$'}}, 0xb) write$P9_RXATTRWALK(r4, &(0x7f0000000640)={0xf, 0x1f, 0x1, 0x9}, 0xf) write$9p(0xffffffffffffffff, &(0x7f0000000680)="9deb07eab4176681343359449ddb459c3ec477c929b318f2afa31f53fb3059492a36c262ee0122d4d1e25f99ec42a4ae93ce3dbc4607bd45387ce0999ccea80ff8ad90a096e2faa331c2c3e00cade3d24f8c8be54938f4b0f5ea8ae2ba0799d814380122d840856f9de3e54131cc09c6d82b7d1dc8643e274ef9af6fcddb73aebae9b9ed029fe9269b731de10fda0a", 0x8f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:36:36 executing program 5: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x80000) r2 = accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffff25a}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80803}, 0x20000880) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000004c0)=""/177, &(0x7f0000000580)=0xb1) r5 = socket$inet(0x2, 0x5, 0x202000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)='ipvlan1\x00', 0xaa, 0x3f, 0x9}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040000}, 0x84) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x6, 0x2, 0xfd}, {0x6, 0x24, 0x1a, 0xffff, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x0, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6d, 0xff}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0xff, 0x1, 0x1, 0xf7, 0x81}, 0x1d, &(0x7f0000000880)={0x5, 0xf, 0x1d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x1, 0x4e, 0x7ff, 0xf5}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xfc, &(0x7f00000008c0)=@string={0xfc, 0x3, "b4e4462a19e6e59cf4606f44145291fc74972106ab6e76410ea91459df86e742a9b1b3009cec764642eda6fca8cd3318ac53aed8f3a8ce34600aed9ef04add7400c56c70618117fffc69b7915414152f454693bd957cc124c9f0c0320e35f5d0279429d4e18561c3c11a4abc462765a757af997a2b7596f51eae7c2a54f76e7455a73072916270dbf568c9f5de69b13ac82f0cff527911b0628cdcf55d2f4199ae916adc7112a468abc8268f65b1b525f97f62605d055396d06bef20354b3f0e31b3612bba2b5ac6b5d308c5c00f6354140058c8e0feb305da1a659f45bbf49d439ceb368fe9e53aa05c1d78d77213f32e2e2da4a13af74a72d3"}}]}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x687100caf667ccfb, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x2004c081) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000b80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbc9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) 07:36:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x67, 0x1, {0x40, 0x3, 0x8}}, 0x14) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x47, 0x1}, 0x7) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r6, 0x0, 0x2c, &(0x7f00000009c0)="12bc6bb5d8d82656d49d9ad5d4073341ff1938d5c319b3f5f9d62786daed490ac2bfaba30811e506d3880ffe653bd2a71dbb44ef1749c48c5e0120d5cfba2ec8aa93535e6124767b4a479732059b67ce5f0e776bc7b411faf628287df2d9973eba871971e1757dd0f17fc31c021602190510432af1d69cfe3e9356b86286efecbadec1323687421ca62fa9698f2bbaff11d7ea896ca8c0", 0x97) [ 157.938911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.939947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:36 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) 07:36:36 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) add_key$keyring(&(0x7f0000001140), &(0x7f0000001180)={'syz', 0x2}, 0x0, 0x0, 0x0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:36:36 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) write$P9_RLERROR(r4, &(0x7f0000000600)={0xb, 0x7, 0x2, {0x2, ':$'}}, 0xb) write$P9_RXATTRWALK(r4, &(0x7f0000000640)={0xf, 0x1f, 0x1, 0x9}, 0xf) write$9p(0xffffffffffffffff, &(0x7f0000000680)="9deb07eab4176681343359449ddb459c3ec477c929b318f2afa31f53fb3059492a36c262ee0122d4d1e25f99ec42a4ae93ce3dbc4607bd45387ce0999ccea80ff8ad90a096e2faa331c2c3e00cade3d24f8c8be54938f4b0f5ea8ae2ba0799d814380122d840856f9de3e54131cc09c6d82b7d1dc8643e274ef9af6fcddb73aebae9b9ed029fe9269b731de10fda0a", 0x8f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:36:36 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x67, 0x1, {0x40, 0x3, 0x8}}, 0x14) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x47, 0x1}, 0x7) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r6, 0x0, 0x2c, &(0x7f00000009c0)="12bc6bb5d8d82656d49d9ad5d4073341ff1938d5c319b3f5f9d62786daed490ac2bfaba30811e506d3880ffe653bd2a71dbb44ef1749c48c5e0120d5cfba2ec8aa93535e6124767b4a479732059b67ce5f0e776bc7b411faf628287df2d9973eba871971e1757dd0f17fc31c021602190510432af1d69cfe3e9356b86286efecbadec1323687421ca62fa9698f2bbaff11d7ea896ca8c0", 0x97) 07:36:36 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @can, 0x8f0, 0x0, 0x0, 0x0, 0x261, &(0x7f0000000480)='ip6gretap0\x00', 0x3, 0x6, 0x20}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040051}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0xc4) 07:36:36 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) write$P9_RLERROR(r4, &(0x7f0000000600)={0xb, 0x7, 0x2, {0x2, ':$'}}, 0xb) write$P9_RXATTRWALK(r4, &(0x7f0000000640)={0xf, 0x1f, 0x1, 0x9}, 0xf) write$9p(0xffffffffffffffff, &(0x7f0000000680)="9deb07eab4176681343359449ddb459c3ec477c929b318f2afa31f53fb3059492a36c262ee0122d4d1e25f99ec42a4ae93ce3dbc4607bd45387ce0999ccea80ff8ad90a096e2faa331c2c3e00cade3d24f8c8be54938f4b0f5ea8ae2ba0799d814380122d840856f9de3e54131cc09c6d82b7d1dc8643e274ef9af6fcddb73aebae9b9ed029fe9269b731de10fda0a", 0x8f) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:36:36 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000001100)=r4) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:36:36 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000e80)={0x73622a85, 0x1, 0x1}) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) 07:36:48 executing program 5: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x80000) r2 = accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffff25a}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80803}, 0x20000880) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000004c0)=""/177, &(0x7f0000000580)=0xb1) r5 = socket$inet(0x2, 0x5, 0x202000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)='ipvlan1\x00', 0xaa, 0x3f, 0x9}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040000}, 0x84) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x6, 0x2, 0xfd}, {0x6, 0x24, 0x1a, 0xffff, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x0, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6d, 0xff}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0xff, 0x1, 0x1, 0xf7, 0x81}, 0x1d, &(0x7f0000000880)={0x5, 0xf, 0x1d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x1, 0x4e, 0x7ff, 0xf5}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xfc, &(0x7f00000008c0)=@string={0xfc, 0x3, "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"}}]}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x687100caf667ccfb, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x2004c081) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000b80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbc9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) 07:36:48 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @can, 0x8f0, 0x0, 0x0, 0x0, 0x261, &(0x7f0000000480)='ip6gretap0\x00', 0x3, 0x6, 0x20}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040051}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x801) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0xc4) 07:36:48 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @remote, @rand_addr=0x64010101}, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r1, 0x60e8cddf16eb20a8, 0x40, 0x1, 0x9, 0x1c, @empty, @mcast1, 0x7800, 0x700, 0x3686, 0x20}}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8000, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x57, r4, r0}, {0x3f, 0x5, 0xfff, 0x7, 0x1, 0x3, 0x3f, 0x92}, {0x6a08000000000, 0x5, 0x3}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x75a299c1c2c914ef, 0x3, 0x8, 0x7fffffff, 0x7, 0x7f}}, 0xe8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4$inet(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000007c0)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x2, 0xffff, 0x1f, 0x8, 0x3]}, &(0x7f0000000840)=0x78) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008802}, 0x40010) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000980)={0x3ff}, 0x4) bind$inet(r5, &(0x7f00000009c0)={0x2, 0x4e22, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 07:36:48 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001080)) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:36:48 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3f, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x1, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x29, 0x1, 0x1, 0xfffff621, 0x0, @mcast1, @mcast2, 0x700, 0x700, 0xfff, 0x4}}) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048885) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004000}, 0x44090) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x30b, 0x7, 0x20, 0x3b, 0x2, @broadcast}, @sco={0x1f, @none}, 0x4b72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='bond_slave_0\x00', 0xffffffff, 0x3, 0x3}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0xd195, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) socketpair(0x33, 0x5, 0x800, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x81, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x2010) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c800}, 0x800) 07:36:48 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) write$P9_RLERROR(r4, &(0x7f0000000600)={0xb, 0x7, 0x2, {0x2, ':$'}}, 0xb) write$P9_RXATTRWALK(r4, &(0x7f0000000640)={0xf, 0x1f, 0x1, 0x9}, 0xf) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:36:48 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x67, 0x1, {0x40, 0x3, 0x8}}, 0x14) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x47, 0x1}, 0x7) r6 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_buf(r6, 0x0, 0x2c, &(0x7f00000009c0)="12bc6bb5d8d82656d49d9ad5d4073341ff1938d5c319b3f5f9d62786daed490ac2bfaba30811e506d3880ffe653bd2a71dbb44ef1749c48c5e0120d5cfba2ec8aa93535e6124767b4a479732059b67ce5f0e776bc7b411faf628287df2d9973eba871971e1757dd0f17fc31c021602190510432af1d69cfe3e9356b86286efecbadec1323687421ca62fa9698f2bbaff11d7ea896ca8c0", 0x97) 07:36:48 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000e40)) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) 07:36:48 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) write$P9_RLERROR(r4, &(0x7f0000000600)={0xb, 0x7, 0x2, {0x2, ':$'}}, 0xb) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) [ 169.775715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.778042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:36:48 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x3c, r3, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000004) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:36:48 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x67, 0x1, {0x40, 0x3, 0x8}}, 0x14) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000980)={0x7, 0x47, 0x1}, 0x7) socket$inet_icmp(0x2, 0x2, 0x1) 07:36:48 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$9p(r5, &(0x7f0000000540)="4652199190a7e754a2f044f7aa5e121ebdd9cfcc10f6280015c1d7f5debef6cfb49c8284dcea60cf1e627816346039f0ab2096a622c67511cfb699d0f4dfe631224aaf7d2e8dd5b2e10103b0ec87812184feefe546fd1a56b0369d9bb704a55b718135b987166fe9a2b79958f2d36fa31a3e4bdb1b723d90b0d6a612b31da5393c5a66a519d8c7f7092b5dca793e0e8e08f04cbbcaba", 0x96) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:36:48 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) pipe2$9p(&(0x7f0000000500), 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:36:48 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x6) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) 07:36:48 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r1, r2/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) syz_genetlink_get_family_id$batadv(&(0x7f0000000f80), r0) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:36:48 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000940)={0x14, 0x67, 0x1, {0x40, 0x3, 0x8}}, 0x14) socket$inet_icmp(0x2, 0x2, 0x1) [ 179.433276] Bluetooth: hci4: command 0x0406 tx timeout [ 179.433378] Bluetooth: hci6: command 0x0406 tx timeout [ 179.433764] Bluetooth: hci7: command 0x0406 tx timeout [ 179.434700] Bluetooth: hci0: command 0x0406 tx timeout [ 180.969306] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 180.970343] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.971038] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.972098] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.973404] Call Trace: [ 180.974302] [ 180.974764] __schedule+0x893/0x2470 [ 180.975841] ? io_schedule_timeout+0x150/0x150 [ 180.976598] ? do_raw_spin_lock+0x121/0x260 [ 180.977216] ? rwlock_bug.part.0+0x90/0x90 [ 180.977790] schedule+0xda/0x1b0 [ 180.978292] rescuer_thread+0x851/0xdb0 [ 180.978845] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.979566] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.980293] ? lockdep_hardirqs_on+0x79/0x100 [ 180.980925] ? worker_thread+0x1260/0x1260 [ 180.981549] kthread+0x2ed/0x3a0 [ 180.982033] ? kthread_complete_and_exit+0x40/0x40 [ 180.982756] ret_from_fork+0x22/0x30 [ 180.983328] [ 180.983657] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.984555] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.985295] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.986355] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.987520] Call Trace: [ 180.987873] [ 180.988226] __schedule+0x893/0x2470 [ 180.988770] ? io_schedule_timeout+0x150/0x150 [ 180.989435] ? do_raw_spin_lock+0x121/0x260 [ 180.990043] ? rwlock_bug.part.0+0x90/0x90 [ 180.990674] schedule+0xda/0x1b0 [ 180.991166] rescuer_thread+0x851/0xdb0 [ 180.991758] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.992475] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.993159] ? lockdep_hardirqs_on+0x79/0x100 [ 180.993810] ? worker_thread+0x1260/0x1260 [ 180.994436] kthread+0x2ed/0x3a0 [ 180.994946] ? kthread_complete_and_exit+0x40/0x40 [ 180.995651] ret_from_fork+0x22/0x30 [ 180.996231] [ 180.996560] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.997474] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.998215] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.999259] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 181.000393] Call Trace: [ 181.000745] [ 181.001061] __schedule+0x893/0x2470 [ 181.001622] ? io_schedule_timeout+0x150/0x150 [ 181.002288] ? do_raw_spin_lock+0x121/0x260 [ 181.002902] ? rwlock_bug.part.0+0x90/0x90 [ 181.003531] schedule+0xda/0x1b0 [ 181.004011] rescuer_thread+0x851/0xdb0 [ 181.004603] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.005320] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.006002] ? lockdep_hardirqs_on+0x79/0x100 [ 181.006669] ? worker_thread+0x1260/0x1260 [ 181.007294] kthread+0x2ed/0x3a0 [ 181.007770] ? kthread_complete_and_exit+0x40/0x40 [ 181.008470] ret_from_fork+0x22/0x30 [ 181.009008] [ 181.009363] INFO: task netns:6 blocked for more than 143 seconds. [ 181.010173] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.010926] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.011999] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 181.013139] Call Trace: [ 181.013525] [ 181.013848] __schedule+0x893/0x2470 [ 181.014406] ? io_schedule_timeout+0x150/0x150 [ 181.015045] ? do_raw_spin_lock+0x121/0x260 [ 181.015677] ? rwlock_bug.part.0+0x90/0x90 [ 181.016304] schedule+0xda/0x1b0 [ 181.016779] rescuer_thread+0x851/0xdb0 [ 181.017358] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.018043] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.018767] ? lockdep_hardirqs_on+0x79/0x100 [ 181.019414] ? worker_thread+0x1260/0x1260 [ 181.020000] kthread+0x2ed/0x3a0 [ 181.020497] ? kthread_complete_and_exit+0x40/0x40 [ 181.021161] ret_from_fork+0x22/0x30 [ 181.021729] [ 181.022051] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 181.022980] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.023710] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.024742] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 181.025871] Workqueue: 0x0 (kblockd) [ 181.026421] Call Trace: [ 181.026779] [ 181.027096] __schedule+0x893/0x2470 [ 181.027657] ? io_schedule_timeout+0x150/0x150 [ 181.028327] schedule+0xda/0x1b0 [ 181.028801] worker_thread+0x15f/0x1260 [ 181.029403] ? process_one_work+0x16a0/0x16a0 [ 181.030020] kthread+0x2ed/0x3a0 [ 181.030520] ? kthread_complete_and_exit+0x40/0x40 [ 181.031239] ret_from_fork+0x22/0x30 [ 181.031773] [ 181.032091] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 181.033002] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.033731] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.034774] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 181.035908] Call Trace: [ 181.036287] [ 181.036608] __schedule+0x893/0x2470 [ 181.037136] ? io_schedule_timeout+0x150/0x150 [ 181.037790] ? do_raw_spin_lock+0x121/0x260 [ 181.038411] ? rwlock_bug.part.0+0x90/0x90 [ 181.039016] schedule+0xda/0x1b0 [ 181.039526] rescuer_thread+0x851/0xdb0 [ 181.040076] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.040775] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.041471] ? lockdep_hardirqs_on+0x79/0x100 [ 181.042082] ? worker_thread+0x1260/0x1260 [ 181.042689] kthread+0x2ed/0x3a0 [ 181.043157] ? kthread_complete_and_exit+0x40/0x40 [ 181.043848] ret_from_fork+0x22/0x30 [ 181.044407] [ 181.044724] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 181.045666] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.046392] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.047420] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 181.048532] Call Trace: [ 181.048879] [ 181.049222] __schedule+0x893/0x2470 [ 181.049748] ? io_schedule_timeout+0x150/0x150 [ 181.050398] ? mark_held_locks+0x9e/0xe0 [ 181.050967] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.051670] schedule+0xda/0x1b0 [ 181.052134] rcu_tasks_one_gp+0x3db/0xc10 [ 181.052753] rcu_tasks_kthread+0x80/0xa0 [ 181.053331] ? rcu_tasks_postscan+0x10/0x10 [ 181.053914] kthread+0x2ed/0x3a0 [ 181.054413] ? kthread_complete_and_exit+0x40/0x40 [ 181.055080] ret_from_fork+0x22/0x30 [ 181.055636] [ 181.055957] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 181.056868] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.057593] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.058616] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 181.059761] Workqueue: 0x0 (events_highpri) [ 181.060386] Call Trace: [ 181.060732] [ 181.061046] __schedule+0x893/0x2470 [ 181.061601] ? io_schedule_timeout+0x150/0x150 [ 181.062262] schedule+0xda/0x1b0 [ 181.062727] worker_thread+0x15f/0x1260 [ 181.063322] ? process_one_work+0x16a0/0x16a0 [ 181.063929] kthread+0x2ed/0x3a0 [ 181.064417] ? kthread_complete_and_exit+0x40/0x40 [ 181.065062] ret_from_fork+0x22/0x30 [ 181.065610] [ 181.065921] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 181.066787] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.067484] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.068461] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 181.069523] Call Trace: [ 181.069855] [ 181.070155] __schedule+0x893/0x2470 [ 181.070700] ? io_schedule_timeout+0x150/0x150 [ 181.071312] ? do_raw_spin_lock+0x121/0x260 [ 181.071865] ? rwlock_bug.part.0+0x90/0x90 [ 181.072447] schedule+0xda/0x1b0 [ 181.072894] rescuer_thread+0x851/0xdb0 [ 181.073445] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.074085] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.074756] ? lockdep_hardirqs_on+0x79/0x100 [ 181.075379] ? worker_thread+0x1260/0x1260 [ 181.075940] kthread+0x2ed/0x3a0 [ 181.076424] ? kthread_complete_and_exit+0x40/0x40 [ 181.077057] ret_from_fork+0x22/0x30 [ 181.077599] [ 181.077927] INFO: task writeback:28 blocked for more than 143 seconds. [ 181.078794] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.079494] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.080477] task:writeback state:I stack:30176 pid:28 ppid:2 flags:0x00004000 [ 181.081557] Call Trace: [ 181.081890] [ 181.082229] __schedule+0x893/0x2470 [ 181.082738] ? io_schedule_timeout+0x150/0x150 [ 181.083358] ? do_raw_spin_lock+0x121/0x260 [ 181.083915] ? rwlock_bug.part.0+0x90/0x90 [ 181.084496] schedule+0xda/0x1b0 [ 181.084949] rescuer_thread+0x851/0xdb0 [ 181.085500] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.086139] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.086836] ? lockdep_hardirqs_on+0x79/0x100 [ 181.087448] ? worker_thread+0x1260/0x1260 [ 181.088004] kthread+0x2ed/0x3a0 [ 181.088484] ? kthread_complete_and_exit+0x40/0x40 [ 181.089127] ret_from_fork+0x22/0x30 [ 181.089670] [ 181.090030] [ 181.090030] Showing all locks held in the system: [ 181.090815] 1 lock held by rcu_tasks_kthre/11: [ 181.091372] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 181.092532] 1 lock held by khungtaskd/25: [ 181.093009] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 181.094095] 1 lock held by in:imklog/187: [ 181.094600] 2 locks held by syz-executor/5534: [ 181.095142] [ 181.095381] ============================================= [ 181.095381] [ 183.529308] Bluetooth: hci1: command 0x0406 tx timeout 07:37:02 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @can, 0x8f0, 0x0, 0x0, 0x0, 0x261, &(0x7f0000000480)='ip6gretap0\x00', 0x3, 0x6, 0x20}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040051}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x801) syz_genetlink_get_family_id$tipc(&(0x7f0000000ac0), r0) 07:37:02 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@private, @in=@loopback}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:37:02 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3f, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x1, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x29, 0x1, 0x1, 0xfffff621, 0x0, @mcast1, @mcast2, 0x700, 0x700, 0xfff, 0x4}}) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048885) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004000}, 0x44090) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x30b, 0x7, 0x20, 0x3b, 0x2, @broadcast}, @sco={0x1f, @none}, 0x4b72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='bond_slave_0\x00', 0xffffffff, 0x3, 0x3}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0xd195, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) socketpair(0x33, 0x5, 0x800, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x81, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x2010) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x24, r8, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x0) 07:37:02 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @remote, @rand_addr=0x64010101}, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r1, 0x60e8cddf16eb20a8, 0x40, 0x1, 0x9, 0x1c, @empty, @mcast1, 0x7800, 0x700, 0x3686, 0x20}}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8000, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x57, r4, r0}, {0x3f, 0x5, 0xfff, 0x7, 0x1, 0x3, 0x3f, 0x92}, {0x6a08000000000, 0x5, 0x3}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x75a299c1c2c914ef, 0x3, 0x8, 0x7fffffff, 0x7, 0x7f}}, 0xe8) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r7, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4$inet(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, &(0x7f00000007c0)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x2, 0xffff, 0x1f, 0x8, 0x3]}, &(0x7f0000000840)=0x78) sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008802}, 0x40010) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000980)={0x3ff}, 0x4) bind$inet(r5, &(0x7f00000009c0)={0x2, 0x4e22, @loopback}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 07:37:02 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r0, r1/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) select(0x40, &(0x7f0000000e40)={0x9, 0x3, 0x9, 0xffffffffffffec2d, 0xffff, 0x1ff, 0x10000, 0xffffffff}, &(0x7f0000000e80)={0x8, 0x6a6b, 0x7, 0x3, 0x3, 0xab, 0x10000, 0x1000}, &(0x7f0000000ec0)={0x0, 0x745c, 0x4, 0x1, 0x7, 0x5, 0x6, 0x100000001}, &(0x7f0000000f00)={0x0, 0x2710}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:37:02 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x2, 0xffffffffffffffff, 0x4e7d, 0x80000}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x4, 'lblc\x00', 0x0, 0x1, 0x1e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x0, 0x20, 0x8, 0x6}}, 0x44) r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$DVD_READ_STRUCT(0xffffffffffffffff, 0x5390, &(0x7f0000000280)=@physical={0x0, 0x0, [{0xa, 0x2, 0x0, 0x6, 0x1, 0x1, 0x2, 0x0, 0xc, 0x1, 0x0, 0x0, 0xc1d}, {0x4, 0x8, 0xc, 0x0, 0x7, 0x1, 0x3, 0x0, 0x2, 0x1, 0x3, 0x10001, 0x5}, {0x3, 0x8, 0x7, 0x5, 0x1, 0x0, 0x1, 0x9, 0x1, 0x0, 0x8d3d, 0x8, 0x101}, {0x4, 0xd, 0x8, 0xc, 0x1, 0x1, 0x3, 0x8, 0x4, 0x1, 0x4, 0x3, 0x81}]}) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x30, r0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}]}, 0x30}}, 0x4000081) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, 0x0, 0x302, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000cc0)={0x0, 0x1, 0x5c}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000d00)={'filter\x00', 0x0, 0x0, 0x0, [0xe2, 0x9, 0x10000, 0x7fff, 0x6, 0xfff]}, &(0x7f0000000d80)=0x78) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000dc0)={@local, @remote, 0x1, 0x5, [@loopback, @local, @remote, @rand_addr=0x64010101, @empty]}, 0x24) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000e00)='./binderfs2/custom0\x00', 0x802, 0x0) socketpair(0x11, 0xa, 0x82df, &(0x7f0000000f40)) 07:37:02 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) ioctl$CDROM_SEND_PACKET(0xffffffffffffffff, 0x5393, &(0x7f0000000900)={"e20d06335e57b62a956f39a2", &(0x7f0000000800)="39a49b97cde89f51f8dad76033f8afc3e44dfc6406dd392633cc159675897e00e70aabb6cdffcc854dc9a0e7dba4829508f2d4adbbfe87c5a8282e7d08f1fc8dda13a10b071c70680a196dc0ea3ef857902233fe662154b0f1163bd4c42a08727a81e37ee0a391d4992182", 0x6b, 0x2, &(0x7f0000000880)={0x2, 0x1, 0x3, 0x3, 0x0, 0x1, 0x0, "6495a4a9", 0x2, "51721156", 0xe, 0x81, 0x5, "5fec22", "25833f3625c4c9dc19bdcc6f59c613bff5d45be3870e822967d4447a6d9684a5d969db65e358143342ac1879d32c"}, 0x1, 0x9, 0x8001, &(0x7f00000008c0)}) socket$inet_icmp(0x2, 0x2, 0x1) 07:37:02 executing program 5: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x1, {{0x2, 0x4e22, @loopback}}}, 0x88) r1 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x80000) r2 = accept$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x4}}, [""]}, 0x24}}, 0x80) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0xfffff25a}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x80803}, 0x20000880) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000004c0)=""/177, &(0x7f0000000580)=0xb1) r5 = socket$inet(0x2, 0x5, 0x202000) ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000600)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x1, 0x0, 0x0, 0x0, 0x5, &(0x7f00000005c0)='ipvlan1\x00', 0xaa, 0x3f, 0x9}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000006c0), r1) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r6, 0x100, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x28040000}, 0x84) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f00000007c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x6, 0x2, 0xfd}, {0x6, 0x24, 0x1a, 0xffff, 0xc}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0xfc, 0x0, 0xf9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x6d, 0xff}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x110, 0xff, 0x1, 0x1, 0xf7, 0x81}, 0x1d, &(0x7f0000000880)={0x5, 0xf, 0x1d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa4, 0x1, 0x4e, 0x7ff, 0xf5}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x1, [{0xfc, &(0x7f00000008c0)=@string={0xfc, 0x3, "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"}}]}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x687100caf667ccfb, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x2004c081) connect$inet(r1, &(0x7f0000000b00)={0x2, 0x4e20, @multicast1}, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), 0xffffffffffffffff) connect$inet(r2, &(0x7f0000000b80)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x24, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xbc9a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40) [ 184.058442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.060637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 07:37:02 executing program 0: sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xf6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}]}, 0x24}}, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x4000) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'bridge0\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4044004}, 0x40000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f00000004c0)={0x0, @sco={0x1f, @none}, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7fff}, @can, 0x8f0, 0x0, 0x0, 0x0, 0x261, &(0x7f0000000480)='ip6gretap0\x00', 0x3, 0x6, 0x20}) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, 0x0, r2) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @private0}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x88}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040051}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r4, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x2c}}, 0x4040881) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) syz_genetlink_get_family_id$fou(&(0x7f0000000900), r3) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r5) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x8000}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x200080c4}, 0x801) 07:37:02 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r0, r1/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) rt_sigaction(0xb, &(0x7f0000000d00)={&(0x7f0000000c40)="df6046c4a1ad656108440faeec660f668c24640faa12245bf20faef5360f16e2f73981618100000021c482258e2b", 0x10000001, &(0x7f0000000c80)="3e2e0f72d3fe8f69a894a90a0000003e440fbefac4634578721d0d3e0f1c9b83000000660f5b8d0c000000642e65660f380515da0000008fa938966300c4a17c29a702000000660f1c9b74940000", {[0x9]}}, &(0x7f0000000dc0)={&(0x7f0000000d40)="c4827d185900abc4617877420f01f9c4a2adaca501000000c4e229b9e04083cc0ec4826d164f5ec40141f6f9672e450fc5d8bf", 0x0, &(0x7f0000000d80)="c4627da86199440f01d980acd3000880410066420f381e7200c4428147dc6565f30f5ec2430f823c2e00000f472b0fe2dff3f342d240c2"}, 0x8, &(0x7f0000000e00)) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:37:02 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x400a83, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:37:02 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x4, 0x76, 0x15, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80, 0x700, 0x1e, 0x7fffffff}}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x815) r1 = socket$inet6(0xa, 0x1, 0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000200)={'ip6gre0\x00', r2, 0x29, 0x6, 0xe7, 0x3, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x80, 0x700, 0x1ff, 0x6}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000340)={0x0, @xdp={0x2c, 0x5, r2, 0x30}, @nl=@unspec, @l2={0x1f, 0x0, @none, 0x400}, 0x7, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000300)='nr0\x00', 0x40, 0x5, 0x425f}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x40) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000480)={0x8, 0x35, 0x2}, 0x8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'ip6gre0\x00', r3, 0x4, 0x7, 0x4, 0x1, 0x0, @mcast1, @private2, 0x40, 0x8, 0x0, 0x4}}) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000580)=0x3) geteuid() r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r5, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x18, 0x18, {0x3, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x1000) socket$inet_icmp(0x2, 0x2, 0x1) 07:37:02 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4, 0x108, 0xffffffffffff1249, 0x1000, 0x10000, 0x4, 0x400, 0x7fffffff}, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x7, 0x80000000, 0x3ff, 0x7, 0x88}, &(0x7f0000000080)={0xb5a2, 0xffff800000000000, 0x8, 0x2, 0x5, 0x9, 0x6, 0x4}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x2]}, 0x8}) pselect6(0x40, &(0x7f0000000180)={0x1, 0x6, 0x1, 0xfffffffffffffff1, 0x0, 0x9, 0x3f, 0x65}, &(0x7f00000001c0)={0x9, 0xbc8f, 0x8, 0x200, 0x4, 0x58a, 0x7, 0x80}, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0xe5, 0x9, 0x0, 0x6e9d, 0xb6b0}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={[0x6]}, 0x8}) recvmmsg(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000300)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/137, 0x89}, {&(0x7f0000000500)=""/16, 0x10}, {&(0x7f0000000540)=""/238, 0xee}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/161, 0xa1}], 0x6, &(0x7f0000000800)=""/100, 0x64}, 0x7}], 0x1, 0x80000002, &(0x7f00000008c0)={0x77359400}) mlockall(0x4) mlockall(0xf1bfae62c8c605ac) clock_gettime(0x0, &(0x7f00000009c0)={0x0, 0x0}) select(0x40, &(0x7f0000000900)={0x1, 0xffc0000000000000, 0xd36, 0x3194, 0x4, 0x1, 0x0, 0x1f}, &(0x7f0000000940)={0x7fff, 0x8, 0xffff, 0x800000000000000, 0x0, 0xfda5, 0x9, 0x6286}, &(0x7f0000000980)={0x1, 0x734c, 0x3, 0x5, 0x8, 0x5, 0xa6fd, 0xa0}, &(0x7f0000000a00)={r0, r1/1000+60000}) getitimer(0x2, &(0x7f0000000a40)) getitimer(0x1, &(0x7f0000000a80)) pselect6(0x40, &(0x7f0000000ac0)={0x8, 0x8, 0xffffffffffff0000, 0x6, 0x1000, 0xba0e, 0x80, 0x6}, &(0x7f0000000b00)={0x5, 0xa2f, 0x8, 0x3, 0xffff, 0x1, 0x0, 0x401}, &(0x7f0000000b40)={0x6, 0x31b680000000, 0x8db3, 0xffff, 0x1, 0x7fffffff, 0xffffffff, 0x2}, &(0x7f0000000b80)={0x0, 0x3938700}, &(0x7f0000000c00)={&(0x7f0000000bc0)={[0xfffffffffffffffe]}, 0x8}) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001300)={0x18, 0xf, 0x2, {{0x2, 0x1, 0x5}, 0x800}}, 0x18) 07:37:02 executing program 6: write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xd, 0x1, {{0x40}, 0xc62}}, 0x18) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERROR(r0, &(0x7f0000000080)={0x9, 0x7, 0x2}, 0x9) write$P9_RXATTRCREATE(r0, &(0x7f00000000c0)={0x7, 0x21, 0x1}, 0x7) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000140)={0xa0, 0x19, 0x1, {0x3000, {0x4, 0x3, 0x6}, 0x140, 0x0, 0x0, 0x5, 0x526, 0x80, 0x8, 0x20, 0xfffffffffffffffb, 0x1, 0x8001, 0x74, 0x5, 0x0, 0x9, 0x8001, 0x2c6f, 0x4}}, 0xa0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x2002, 0x0) write$P9_RAUTH(r2, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x1, 0x4, 0x5}}, 0x14) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r3, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) pipe2$9p(&(0x7f0000000340), 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000740)) 07:37:02 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@broadcast, @remote, @rand_addr=0x64010101}, 0xc) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl2\x00', &(0x7f00000002c0)={'sit0\x00', r1, 0x60e8cddf16eb20a8, 0x40, 0x1, 0x9, 0x1c, @empty, @mcast1, 0x7800, 0x700, 0x3686, 0x20}}) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000380)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e20, 0x8000, 0x4e21, 0x0, 0x2, 0x0, 0xa0, 0x57, r4, r0}, {0x3f, 0x5, 0xfff, 0x7, 0x1, 0x3, 0x3f, 0x92}, {0x6a08000000000, 0x5, 0x3}, 0x7, 0x6e6bb7, 0x2, 0x1, 0x0, 0x1}, {{@in=@broadcast, 0x4d5, 0x6c}, 0xa, @in=@multicast1, 0x0, 0x75a299c1c2c914ef, 0x3, 0x8, 0x7fffffff, 0x7, 0x7f}}, 0xe8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0x80, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r6, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_TYPE={0x5, 0x4, 0x7}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}]}, 0x88}, 0x1, 0x0, 0x0, 0x50}, 0x0) accept4$inet(r2, &(0x7f00000006c0), &(0x7f0000000700)=0x10, 0x80000) getpeername$inet(0xffffffffffffffff, &(0x7f0000000740)={0x2, 0x0, @broadcast}, &(0x7f0000000780)=0x10) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INIT_INFO(r8, 0x0, 0x82, &(0x7f00000007c0)={'nat\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x2, 0xffff, 0x1f, 0x8, 0x3]}, &(0x7f0000000840)=0x78) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008802}, 0x40010) setsockopt$inet_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000980)={0x3ff}, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) 07:37:02 executing program 7: ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0x4, 0x3f, 0x3, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10, 0x8000, 0x1, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r0, 0x29, 0x1, 0x1, 0xfffff621, 0x0, @mcast1, @mcast2, 0x700, 0x700, 0xfff, 0x4}}) socketpair(0x21, 0x80000, 0x3, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x140400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048885) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x64004000}, 0x44090) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000440)={0x0, @l2={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @llc={0x1a, 0x30b, 0x7, 0x20, 0x3b, 0x2, @broadcast}, @sco={0x1f, @none}, 0x4b72, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)='bond_slave_0\x00', 0xffffffff, 0x3, 0x3}) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000004c0)={0xd195, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) socketpair(0x33, 0x5, 0x800, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x1a, 0x81, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40001) sendmsg$TIPC_CMD_GET_MAX_PORTS(r5, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r6, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}}, 0x2010) ioctl$sock_inet_SIOCDELRT(r4, 0x890c, &(0x7f0000000900)={0x0, {0x2, 0x4e20, @private=0xa010102}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000980)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), r3) VM DIAGNOSIS: 07:36:59 Registers: info registers vcpu 0 RAX=0000000000000050 RBX=ffff88800c390000 RCX=0000000000000000 RDX=00000000000101f7 RSI=ffffffff820bfd77 RDI=0000000000000007 RBP=00000000000003e7 RSP=ffff8880101f7268 R8 =0000000000000007 R9 =0000000000010000 R10=00000000000101f7 R11=0000000000000001 R12=00000000000101f7 R13=ffffed1001872001 R14=ffffffff857fd5c0 R15=dffffc0000000000 RIP=ffffffff820bfd7b RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555d602fa2f0 CR3=0000000008d2a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2039353a36333a37 302033202074634f YMM01=0000000000000000 0000000000000000 5d3839303237392e 30383120205b203a YMM02=0000000000000000 0000000000000000 747320493a657461 7473202020202020 YMM03=0000000000000000 0000000000000000 202020202020323a 6469707020202020 YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d383930323739 2e30383120205b20 YMM07=0000000000000000 0000000000000000 732039353a36333a 3730203320207463 YMM08=0000000000000000 0000000000000000 7475636578652d7a 7973223d6d6d6f63 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000037 R11=0000000000000001 R12=0000000000000037 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f46b8daa710 CR3=000000001b23c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 40f0c30000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000