Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:5036' (ECDSA) to the list of known hosts. 2022/10/03 10:20:14 fuzzer started 2022/10/03 10:20:15 dialing manager at localhost:35095 syzkaller login: [ 37.448875] cgroup: Unknown subsys name 'net' [ 37.554589] cgroup: Unknown subsys name 'rlimit' 2022/10/03 10:20:30 syscalls: 202 2022/10/03 10:20:30 code coverage: enabled 2022/10/03 10:20:30 comparison tracing: enabled 2022/10/03 10:20:30 extra coverage: enabled 2022/10/03 10:20:30 setuid sandbox: enabled 2022/10/03 10:20:30 namespace sandbox: enabled 2022/10/03 10:20:30 Android sandbox: enabled 2022/10/03 10:20:30 fault injection: enabled 2022/10/03 10:20:30 leak checking: enabled 2022/10/03 10:20:30 net packet injection: enabled 2022/10/03 10:20:30 net device setup: enabled 2022/10/03 10:20:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 10:20:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 10:20:30 USB emulation: enabled 2022/10/03 10:20:30 hci packet injection: enabled 2022/10/03 10:20:30 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 10:20:30 802.15.4 emulation: enabled 2022/10/03 10:20:30 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 10:20:31 starting 8 fuzzer processes 10:20:31 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 10:20:31 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:20:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'gretap0\x00', r0, 0xc3fc461bab6e754f, 0x80, 0x80, 0x2, {{0x17, 0x4, 0x3, 0xf, 0x5c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@lsrr={0x83, 0x1b, 0x0, [@local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x2c, 0x7a, 0x1, 0x9, [{@rand_addr=0x64010102, 0xffff0001}, {@remote, 0xffff}, {@loopback, 0x4}, {@multicast1, 0x9}, {@remote, 0x1}]}]}}}}}) 10:20:31 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r8}) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000004c80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x44, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe92c4e2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff7f}]}, 0x44}}, 0x4000000) r10 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, r10, 0x0, r2, r6, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) [ 53.602752] audit: type=1400 audit(1664792431.885:6): avc: denied { execmem } for pid=285 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 10:20:31 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f000000a500)) r10 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r10, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r12, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r7, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f000000a780)={0x0, @multicast1, @multicast2}, &(0x7f000000a7c0)=0xc) r13 = socket(0x23, 0x3, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f000000a980)={&(0x7f000000a840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000a940)={&(0x7f000000a900)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 10:20:31 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000006380), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:20:31 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:20:31 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r6 = getpgid(r3) sched_rr_get_interval(r6, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x1, 0x10, 0x3ff, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0x6, [0x8, 0x3ff]}, @cipso={0x86, 0x12, 0x0, [{0x1, 0xc, "bb807522dee9a60f1c82"}]}, @ssrr={0x89, 0x1b, 0x93, [@loopback, @multicast1, @remote, @rand_addr=0x64010100, @private=0xa010101, @local]}, @lsrr={0x83, 0x27, 0x69, [@multicast2, @broadcast, @rand_addr=0x64010100, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0x7, 0xb5, [@empty]}, @rr={0x7, 0x27, 0x81, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x1, [0x7, 0x82]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) [ 54.941556] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.944131] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.945545] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.947757] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.951232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.952896] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.955400] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.956690] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.961299] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.962424] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.975131] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.976866] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.978659] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.994533] Bluetooth: hci1: HCI_REQ-0x0c1a [ 55.002585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.006675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.024565] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.026684] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.030469] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.032525] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.033995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.035566] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 55.037982] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.039101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.040553] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.042708] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.044636] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.052996] Bluetooth: hci2: HCI_REQ-0x0c1a [ 55.060887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.062382] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 55.063683] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.065542] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.067111] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.068660] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.070217] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.073010] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.078342] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.080066] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.080924] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.081127] Bluetooth: hci4: HCI_REQ-0x0c1a [ 55.082698] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.092529] Bluetooth: hci6: HCI_REQ-0x0c1a [ 57.020723] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 57.020754] Bluetooth: hci0: command 0x0409 tx timeout [ 57.021956] Bluetooth: hci1: command 0x0409 tx timeout [ 57.084270] Bluetooth: hci7: Opcode 0x c03 failed: -110 [ 57.085845] Bluetooth: hci2: command 0x0409 tx timeout [ 57.148764] Bluetooth: hci4: command 0x0409 tx timeout [ 57.149739] Bluetooth: hci6: command 0x0409 tx timeout [ 57.150676] Bluetooth: hci5: command 0x0409 tx timeout [ 59.069073] Bluetooth: hci1: command 0x041b tx timeout [ 59.069919] Bluetooth: hci0: command 0x041b tx timeout [ 59.132282] Bluetooth: hci2: command 0x041b tx timeout [ 59.196544] Bluetooth: hci5: command 0x041b tx timeout [ 59.197370] Bluetooth: hci6: command 0x041b tx timeout [ 59.198079] Bluetooth: hci4: command 0x041b tx timeout [ 60.424672] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 60.441813] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 60.463914] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 60.496435] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 60.510480] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 60.517832] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 60.541268] Bluetooth: hci7: HCI_REQ-0x0c1a [ 61.117275] Bluetooth: hci0: command 0x040f tx timeout [ 61.117378] Bluetooth: hci1: command 0x040f tx timeout [ 61.180279] Bluetooth: hci2: command 0x040f tx timeout [ 61.244263] Bluetooth: hci4: command 0x040f tx timeout [ 61.244334] Bluetooth: hci6: command 0x040f tx timeout [ 61.244672] Bluetooth: hci5: command 0x040f tx timeout [ 62.397381] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 62.589286] Bluetooth: hci7: command 0x0409 tx timeout [ 63.164376] Bluetooth: hci0: command 0x0419 tx timeout [ 63.165216] Bluetooth: hci1: command 0x0419 tx timeout [ 63.228259] Bluetooth: hci2: command 0x0419 tx timeout [ 63.292252] Bluetooth: hci5: command 0x0419 tx timeout [ 63.293428] Bluetooth: hci6: command 0x0419 tx timeout [ 63.293454] Bluetooth: hci4: command 0x0419 tx timeout [ 64.637258] Bluetooth: hci7: command 0x041b tx timeout [ 64.817266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.820329] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.822023] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.825405] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.827339] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.828992] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.846966] Bluetooth: hci3: HCI_REQ-0x0c1a [ 66.685336] Bluetooth: hci7: command 0x040f tx timeout [ 66.877410] Bluetooth: hci3: command 0x0409 tx timeout [ 68.732267] Bluetooth: hci7: command 0x0419 tx timeout [ 68.924223] Bluetooth: hci3: command 0x041b tx timeout [ 70.973251] Bluetooth: hci3: command 0x040f tx timeout [ 73.020245] Bluetooth: hci3: command 0x0419 tx timeout [ 109.514490] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) 10:21:28 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000006380), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:21:28 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000006380), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) [ 112.750409] audit: type=1400 audit(1664792491.032:7): avc: denied { create } for pid=3880 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dccp_socket permissive=1 10:21:51 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:21:51 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 10:21:51 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r6 = getpgid(r3) sched_rr_get_interval(r6, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x1, 0x10, 0x3ff, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0x6, [0x8, 0x3ff]}, @cipso={0x86, 0x12, 0x0, [{0x1, 0xc, "bb807522dee9a60f1c82"}]}, @ssrr={0x89, 0x1b, 0x93, [@loopback, @multicast1, @remote, @rand_addr=0x64010100, @private=0xa010101, @local]}, @lsrr={0x83, 0x27, 0x69, [@multicast2, @broadcast, @rand_addr=0x64010100, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0x7, 0xb5, [@empty]}, @rr={0x7, 0x27, 0x81, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x1, [0x7, 0x82]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) 10:21:51 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r8}) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000004c80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x44, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe92c4e2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff7f}]}, 0x44}}, 0x4000000) r10 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, r10, 0x0, r2, r6, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:21:51 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f000000a500)) r10 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r10, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r12, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r7, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f000000a780)={0x0, @multicast1, @multicast2}, &(0x7f000000a7c0)=0xc) r13 = socket(0x23, 0x3, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f000000a980)={&(0x7f000000a840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000a940)={&(0x7f000000a900)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 10:21:51 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'gretap0\x00', r0, 0xc3fc461bab6e754f, 0x80, 0x80, 0x2, {{0x17, 0x4, 0x3, 0xf, 0x5c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@lsrr={0x83, 0x1b, 0x0, [@local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x2c, 0x7a, 0x1, 0x9, [{@rand_addr=0x64010102, 0xffff0001}, {@remote, 0xffff}, {@loopback, 0x4}, {@multicast1, 0x9}, {@remote, 0x1}]}]}}}}}) 10:21:51 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000006380), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 10:21:51 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:21:51 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 10:22:04 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r8}) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000004c80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x44, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe92c4e2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff7f}]}, 0x44}}, 0x4000000) r10 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, r10, 0x0, r2, r6, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:04 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:04 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'gretap0\x00', r0, 0xc3fc461bab6e754f, 0x80, 0x80, 0x2, {{0x17, 0x4, 0x3, 0xf, 0x5c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@lsrr={0x83, 0x1b, 0x0, [@local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x2c, 0x7a, 0x1, 0x9, [{@rand_addr=0x64010102, 0xffff0001}, {@remote, 0xffff}, {@loopback, 0x4}, {@multicast1, 0x9}, {@remote, 0x1}]}]}}}}}) 10:22:04 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) 10:22:04 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:04 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r6 = getpgid(r3) sched_rr_get_interval(r6, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x1, 0x10, 0x3ff, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0x6, [0x8, 0x3ff]}, @cipso={0x86, 0x12, 0x0, [{0x1, 0xc, "bb807522dee9a60f1c82"}]}, @ssrr={0x89, 0x1b, 0x93, [@loopback, @multicast1, @remote, @rand_addr=0x64010100, @private=0xa010101, @local]}, @lsrr={0x83, 0x27, 0x69, [@multicast2, @broadcast, @rand_addr=0x64010100, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0x7, 0xb5, [@empty]}, @rr={0x7, 0x27, 0x81, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x1, [0x7, 0x82]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) 10:22:04 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f000000a500)) r10 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r10, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r12, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r7, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f000000a780)={0x0, @multicast1, @multicast2}, &(0x7f000000a7c0)=0xc) r13 = socket(0x23, 0x3, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f000000a980)={&(0x7f000000a840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000a940)={&(0x7f000000a900)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 10:22:04 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000006380), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) 10:22:04 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000600)) 10:22:04 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:04 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r9, 0x1260, &(0x7f000000a500)) r10 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r10, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r12, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r7, 0x0) getsockopt$inet_pktinfo(r8, 0x0, 0x8, &(0x7f000000a780)={0x0, @multicast1, @multicast2}, &(0x7f000000a7c0)=0xc) r13 = socket(0x23, 0x3, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r13, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f000000a980)={&(0x7f000000a840)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000a940)={&(0x7f000000a900)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) 10:22:05 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r1) 10:22:05 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r6 = getpgid(r3) sched_rr_get_interval(r6, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x1, 0x10, 0x3ff, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0x6, [0x8, 0x3ff]}, @cipso={0x86, 0x12, 0x0, [{0x1, 0xc, "bb807522dee9a60f1c82"}]}, @ssrr={0x89, 0x1b, 0x93, [@loopback, @multicast1, @remote, @rand_addr=0x64010100, @private=0xa010101, @local]}, @lsrr={0x83, 0x27, 0x69, [@multicast2, @broadcast, @rand_addr=0x64010100, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0x7, 0xb5, [@empty]}, @rr={0x7, 0x27, 0x81, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x1, [0x7, 0x82]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x12}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000800}, 0x2000c000) 10:22:05 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001e80)={'syztnl1\x00', &(0x7f0000001e00)={'gretap0\x00', r0, 0xc3fc461bab6e754f, 0x80, 0x80, 0x2, {{0x17, 0x4, 0x3, 0xf, 0x5c, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x29}, {[@lsrr={0x83, 0x1b, 0x0, [@local, @remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x2c, 0x7a, 0x1, 0x9, [{@rand_addr=0x64010102, 0xffff0001}, {@remote, 0xffff}, {@loopback, 0x4}, {@multicast1, 0x9}, {@remote, 0x1}]}]}}}}}) 10:22:05 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r10, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:05 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r8}) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000004c80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x44, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe92c4e2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff7f}]}, 0x44}}, 0x4000000) r10 = getuid() msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, r10, 0x0, r2, r6, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:05 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$mptcp(&(0x7f0000006380), r1) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) 10:22:05 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:05 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40a}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5d9f}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x79}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x40008800) 10:22:05 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r8, 0x1260, &(0x7f000000a500)) r9 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r9, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r11, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r6, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f000000a780)={0x0, @multicast1, @multicast2}, &(0x7f000000a7c0)=0xc) r12 = socket(0x23, 0x3, 0x7) setsockopt$bt_hci_HCI_DATA_DIR(r12, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) 10:22:05 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r6 = getpgid(r3) sched_rr_get_interval(r6, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x1, 0x10, 0x3ff, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0x6, [0x8, 0x3ff]}, @cipso={0x86, 0x12, 0x0, [{0x1, 0xc, "bb807522dee9a60f1c82"}]}, @ssrr={0x89, 0x1b, 0x93, [@loopback, @multicast1, @remote, @rand_addr=0x64010100, @private=0xa010101, @local]}, @lsrr={0x83, 0x27, 0x69, [@multicast2, @broadcast, @rand_addr=0x64010100, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0x7, 0xb5, [@empty]}, @rr={0x7, 0x27, 0x81, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x1, [0x7, 0x82]}, @noop]}}}}}) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000840)={&(0x7f0000000780), 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x3c, r1, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x400}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 10:22:05 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:17 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r8, 0x1260, &(0x7f000000a500)) r9 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r9, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r11, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r6, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f000000a780)={0x0, @multicast1, @multicast2}, &(0x7f000000a7c0)=0xc) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) 10:22:17 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) ioctl$BLKTRACESTART(r7, 0x1274, 0x0) 10:22:17 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r8}) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000004c80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000004d80)={&(0x7f0000004c40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000004d40)={&(0x7f0000004cc0)={0x44, r9, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe92c4e2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffff7f}]}, 0x44}}, 0x4000000) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, 0x0, 0x0, r2, r6, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:17 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:17 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x4c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x9}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x4004) 10:22:17 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) 10:22:17 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r6 = getpgid(r3) sched_rr_get_interval(r6, &(0x7f0000000600)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000640)={'syztnl2\x00', r5, 0x1, 0x10, 0x3ff, 0x0, {{0x2c, 0x4, 0x0, 0x9, 0xb0, 0x66, 0x0, 0x9, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@timestamp={0x44, 0xc, 0x29, 0x0, 0x6, [0x8, 0x3ff]}, @cipso={0x86, 0x12, 0x0, [{0x1, 0xc, "bb807522dee9a60f1c82"}]}, @ssrr={0x89, 0x1b, 0x93, [@loopback, @multicast1, @remote, @rand_addr=0x64010100, @private=0xa010101, @local]}, @lsrr={0x83, 0x27, 0x69, [@multicast2, @broadcast, @rand_addr=0x64010100, @remote, @multicast1, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x12}]}, @rr={0x7, 0x7, 0xb5, [@empty]}, @rr={0x7, 0x27, 0x81, [@broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x20}, @remote, @multicast2, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @timestamp={0x44, 0xc, 0x66, 0x0, 0x1, [0x7, 0x82]}, @noop]}}}}}) 10:22:17 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:17 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) pkey_free(r0) 10:22:17 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r8, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000007880)={'\x00', 0x4, 0xfffff76d, 0xf1ab, 0x4, 0x4150, r5}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:17 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) r5 = getpgid(r3) sched_rr_get_interval(r5, &(0x7f0000000600)) 10:22:17 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) pkey_free(r0) 10:22:17 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r7, 0x1260, &(0x7f000000a500)) r8 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r8, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r10, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x110, r6, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) 10:22:31 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r7}) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000004c80), 0xffffffffffffffff) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, 0x0, 0x0, r2, r5, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:31 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) getegid() sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:31 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) sched_rr_get_interval(0x0, &(0x7f0000000600)) 10:22:31 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f000000a500)) r7 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r7, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f000000a740)={'syztnl1\x00', &(0x7f000000a6c0)={'syztnl1\x00', r9, 0x29, 0x81, 0x1f, 0x669, 0x6, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe0, 0x0, 0x4, 0x80}}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) 10:22:31 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000006340)={'gretap0\x00', &(0x7f00000062c0)={'tunl0\x00', r4, 0x80, 0x872c, 0x3ff, 0x4, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xf6, 0x3, 0xd, [{@private=0xa010100, 0x200000}, {@loopback, 0x5}, {@private=0xa010102, 0x10001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9e}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6b, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x32}, 0x4}]}, @ra={0x94, 0x4, 0x1}]}}}}}) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r5) 10:22:31 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000180)) pkey_free(r0) 10:22:31 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000007840)={&(0x7f0000007740)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007800)={&(0x7f00000077c0)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) 10:22:31 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) pkey_free(r0) 10:22:31 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) syz_genetlink_get_family_id$batadv(&(0x7f0000007780), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:31 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) pkey_free(r0) 10:22:31 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) sched_rr_get_interval(0x0, &(0x7f0000000600)) 10:22:31 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) 10:22:31 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r7}) ioctl$INOTIFY_IOC_SETNEXTWD(r6, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000004c00)={&(0x7f0000004b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x329}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, 0x0, 0x0, r2, r5, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:31 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f000000a500)) r7 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r7, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0), 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f000000a680)={'syztnl0\x00', &(0x7f000000a600)={'syztnl2\x00', r4, 0x0, 0x80, 0x2, 0x4, {{0x13, 0x4, 0x3, 0x1f, 0x4c, 0x67, 0x0, 0xa3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @remote, {[@timestamp_addr={0x44, 0x1c, 0xa2, 0x1, 0x5, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x8001}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x6, [0x40, 0x1, 0x3f, 0x4, 0x400, 0x2]}]}}}}}) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) [ 179.644411] Bluetooth: hci4: command 0x0406 tx timeout [ 179.644525] Bluetooth: hci0: command 0x0406 tx timeout [ 179.645308] Bluetooth: hci1: command 0x0406 tx timeout [ 179.646234] Bluetooth: hci5: command 0x0406 tx timeout [ 179.646988] Bluetooth: hci2: command 0x0406 tx timeout [ 179.647866] Bluetooth: hci6: command 0x0406 tx timeout [ 180.668384] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 180.669658] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.670676] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.672023] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 180.673717] Call Trace: [ 180.674743] [ 180.675658] __schedule+0x893/0x2470 [ 180.676365] ? io_schedule_timeout+0x150/0x150 [ 180.677132] ? do_raw_spin_lock+0x121/0x260 [ 180.677957] ? rwlock_bug.part.0+0x90/0x90 [ 180.678723] schedule+0xda/0x1b0 [ 180.679273] rescuer_thread+0x851/0xdb0 [ 180.679877] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.680653] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.681428] ? lockdep_hardirqs_on+0x79/0x100 [ 180.682126] ? worker_thread+0x1260/0x1260 [ 180.682817] kthread+0x2ed/0x3a0 [ 180.683385] ? kthread_complete_and_exit+0x40/0x40 [ 180.684129] ret_from_fork+0x22/0x30 [ 180.684764] [ 180.685121] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 180.686119] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.686943] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.688105] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 180.689366] Call Trace: [ 180.689756] [ 180.690132] __schedule+0x893/0x2470 [ 180.690759] ? io_schedule_timeout+0x150/0x150 [ 180.691490] ? do_raw_spin_lock+0x121/0x260 [ 180.692154] ? rwlock_bug.part.0+0x90/0x90 [ 180.692847] schedule+0xda/0x1b0 [ 180.693419] rescuer_thread+0x851/0xdb0 [ 180.694043] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.694843] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.695642] ? lockdep_hardirqs_on+0x79/0x100 [ 180.696370] ? worker_thread+0x1260/0x1260 [ 180.697014] kthread+0x2ed/0x3a0 [ 180.697578] ? kthread_complete_and_exit+0x40/0x40 [ 180.698366] ret_from_fork+0x22/0x30 [ 180.698983] [ 180.699384] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 180.700399] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.701214] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.702403] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 180.703679] Call Trace: [ 180.704067] [ 180.704459] __schedule+0x893/0x2470 [ 180.705043] ? io_schedule_timeout+0x150/0x150 [ 180.705783] ? do_raw_spin_lock+0x121/0x260 [ 180.706493] ? rwlock_bug.part.0+0x90/0x90 [ 180.707152] schedule+0xda/0x1b0 [ 180.707715] rescuer_thread+0x851/0xdb0 [ 180.708369] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.709133] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.709969] ? lockdep_hardirqs_on+0x79/0x100 [ 180.710700] ? worker_thread+0x1260/0x1260 [ 180.711395] kthread+0x2ed/0x3a0 [ 180.711923] ? kthread_complete_and_exit+0x40/0x40 [ 180.712713] ret_from_fork+0x22/0x30 [ 180.713354] [ 180.713717] INFO: task netns:6 blocked for more than 143 seconds. [ 180.714677] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.715502] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.716669] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 180.717949] Call Trace: [ 180.718384] [ 180.718741] __schedule+0x893/0x2470 [ 180.719374] ? io_schedule_timeout+0x150/0x150 [ 180.720077] ? do_raw_spin_lock+0x121/0x260 [ 180.720778] ? rwlock_bug.part.0+0x90/0x90 [ 180.721483] schedule+0xda/0x1b0 [ 180.722030] rescuer_thread+0x851/0xdb0 [ 180.722705] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.723481] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.724250] ? lockdep_hardirqs_on+0x79/0x100 [ 180.724910] ? worker_thread+0x1260/0x1260 [ 180.725582] kthread+0x2ed/0x3a0 [ 180.726098] ? kthread_complete_and_exit+0x40/0x40 [ 180.726869] ret_from_fork+0x22/0x30 [ 180.727480] [ 180.727828] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 180.728801] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.729608] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.730732] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 180.731974] Workqueue: 0x0 (rcu_gp) [ 180.732608] Call Trace: [ 180.733022] [ 180.733431] __schedule+0x893/0x2470 [ 180.734041] ? io_schedule_timeout+0x150/0x150 [ 180.734823] schedule+0xda/0x1b0 [ 180.735411] worker_thread+0x15f/0x1260 [ 180.736062] ? process_one_work+0x16a0/0x16a0 [ 180.736817] kthread+0x2ed/0x3a0 [ 180.737395] ? kthread_complete_and_exit+0x40/0x40 [ 180.738203] ret_from_fork+0x22/0x30 [ 180.738827] [ 180.739247] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 180.740260] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.741042] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.742224] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 180.743489] Workqueue: 0x0 (events_highpri) [ 180.744225] Call Trace: [ 180.744620] [ 180.744971] __schedule+0x893/0x2470 [ 180.745605] ? io_schedule_timeout+0x150/0x150 [ 180.746376] schedule+0xda/0x1b0 [ 180.746908] worker_thread+0x15f/0x1260 [ 180.747593] ? process_one_work+0x16a0/0x16a0 [ 180.748336] kthread+0x2ed/0x3a0 [ 180.748864] ? kthread_complete_and_exit+0x40/0x40 [ 180.749648] ret_from_fork+0x22/0x30 [ 180.750291] [ 180.750652] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 180.751671] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.752503] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.753668] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 180.754967] Call Trace: [ 180.755403] [ 180.755758] __schedule+0x893/0x2470 [ 180.756376] ? io_schedule_timeout+0x150/0x150 [ 180.757064] ? do_raw_spin_lock+0x121/0x260 [ 180.757764] ? rwlock_bug.part.0+0x90/0x90 [ 180.758468] schedule+0xda/0x1b0 [ 180.758998] rescuer_thread+0x851/0xdb0 [ 180.759644] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.760448] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.761246] ? lockdep_hardirqs_on+0x79/0x100 [ 180.761947] ? worker_thread+0x1260/0x1260 [ 180.762642] kthread+0x2ed/0x3a0 [ 180.763210] ? kthread_complete_and_exit+0x40/0x40 [ 180.763951] ret_from_fork+0x22/0x30 [ 180.764592] [ 180.764955] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 180.766038] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.766865] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.768025] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 180.769285] Call Trace: [ 180.769675] [ 180.770040] __schedule+0x893/0x2470 [ 180.770666] ? io_schedule_timeout+0x150/0x150 [ 180.771403] ? mark_held_locks+0x9e/0xe0 [ 180.772028] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 180.772842] schedule+0xda/0x1b0 [ 180.773415] rcu_tasks_one_gp+0x3db/0xc10 [ 180.774099] rcu_tasks_kthread+0x80/0xa0 [ 180.774754] ? rcu_tasks_postscan+0x10/0x10 [ 180.775460] kthread+0x2ed/0x3a0 [ 180.775988] ? kthread_complete_and_exit+0x40/0x40 [ 180.776771] ret_from_fork+0x22/0x30 [ 180.777411] [ 180.777837] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 180.778867] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.779714] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.780883] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 180.782204] Workqueue: 0x0 (ata_sff) [ 180.782792] Call Trace: [ 180.783241] [ 180.783596] __schedule+0x893/0x2470 [ 180.784222] ? io_schedule_timeout+0x150/0x150 [ 180.784925] schedule+0xda/0x1b0 [ 180.785474] worker_thread+0x15f/0x1260 [ 180.786121] ? process_one_work+0x16a0/0x16a0 [ 180.786843] kthread+0x2ed/0x3a0 [ 180.787400] ? kthread_complete_and_exit+0x40/0x40 [ 180.788139] ret_from_fork+0x22/0x30 [ 180.788763] [ 180.789123] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 180.790195] Not tainted 6.0.0-rc7-next-20220930 #1 [ 180.790983] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 180.792140] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 180.793421] Workqueue: 0x0 (kblockd) [ 180.794036] Call Trace: [ 180.794492] [ 180.794850] __schedule+0x893/0x2470 [ 180.795468] ? io_schedule_timeout+0x150/0x150 [ 180.796214] schedule+0xda/0x1b0 [ 180.796747] worker_thread+0x15f/0x1260 [ 180.797423] ? process_one_work+0x16a0/0x16a0 [ 180.798119] kthread+0x2ed/0x3a0 [ 180.798680] ? kthread_complete_and_exit+0x40/0x40 [ 180.799467] ret_from_fork+0x22/0x30 [ 180.800066] [ 180.800517] [ 180.800517] Showing all locks held in the system: [ 180.801469] 1 lock held by rcu_tasks_kthre/11: [ 180.802157] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 180.803671] 1 lock held by khungtaskd/25: [ 180.804320] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 180.805711] 1 lock held by in:imklog/188: [ 180.806389] [ 180.806656] ============================================= [ 180.806656] [ 183.740476] Bluetooth: hci7: command 0x0406 tx timeout 10:22:45 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$LOOP_CLR_FD(r2, 0x4c01) pkey_free(r0) 10:22:45 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:45 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r6}) ioctl$INOTIFY_IOC_SETNEXTWD(r5, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000004b00)=0x2, 0x4) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, 0x0, 0x0, r2, r4, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:45 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) recvmmsg$unix(r1, &(0x7f0000006100)=[{{&(0x7f0000000480)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000500)=""/104, 0x68}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/236, 0xec}, {&(0x7f0000001680)=""/255, 0xff}, {&(0x7f0000001780)=""/100, 0x64}, {&(0x7f0000001800)=""/32, 0x20}, {&(0x7f0000001840)=""/208, 0xd0}, {&(0x7f0000001940)=""/2, 0x2}], 0x8}}, {{&(0x7f0000001a00), 0x6e, &(0x7f0000001e00)=[{&(0x7f0000001a80)=""/181, 0xb5}, {&(0x7f0000001b40)=""/27, 0x1b}, {&(0x7f0000001b80)=""/134, 0x86}, {&(0x7f0000001c40)=""/111, 0x6f}, {&(0x7f0000001cc0)=""/13, 0xd}, {&(0x7f0000001d00)=""/217, 0xd9}], 0x6}}, {{&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001f00)=""/32, 0x20}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/124, 0x7c}, {&(0x7f0000002000)=""/119, 0x77}, {&(0x7f0000002080)=""/141, 0x8d}, {&(0x7f0000002140)=""/188, 0xbc}, {&(0x7f0000002200)=""/158, 0x9e}, {&(0x7f00000022c0)=""/13, 0xd}], 0x8, &(0x7f0000002380)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x128}}, {{&(0x7f00000024c0)=@abs, 0x6e, &(0x7f0000004680)=[{&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/216, 0xd8}, {&(0x7f0000004640)=""/12, 0xc}], 0x4, &(0x7f00000046c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}, {{0x0, 0x0, &(0x7f0000005d40)=[{&(0x7f0000004740)=""/124, 0x7c}, {&(0x7f00000047c0)=""/97, 0x61}, {&(0x7f0000004840)=""/194, 0xc2}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/241, 0xf1}, {&(0x7f0000005a40)=""/68, 0x44}, {&(0x7f0000005ac0)=""/135, 0x87}, {&(0x7f0000005b80)=""/169, 0xa9}, {&(0x7f0000005c40)=""/230, 0xe6}], 0x9}}, {{&(0x7f0000005e00), 0x6e, &(0x7f0000006000)=[{&(0x7f0000005e80)=""/50, 0x32}, {&(0x7f0000005ec0)=""/207, 0xcf}, {&(0x7f0000005fc0)=""/28, 0x1c}], 0x3, &(0x7f0000006040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa8}}], 0x6, 0x8000, &(0x7f0000006280)) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), r4) 10:22:45 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r9, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r10}) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000001dc0)) 10:22:45 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x28, r5, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x3, 0x2, 0xfffffffa, 0xa1400000]}]}, 0x28}}, 0x4004000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:46 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20008010}, 0x80) sched_rr_get_interval(0x0, &(0x7f0000000600)) 10:22:46 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f000000a500)) r5 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r5, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) pipe2(&(0x7f000000a5c0), 0x80000) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) [ 187.836437] Bluetooth: hci3: command 0x0406 tx timeout 10:22:46 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) pkey_free(r0) 10:22:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r8, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r9}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) 10:22:46 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) accept4$bt_l2cap(r1, 0x0, &(0x7f00000000c0), 0x0) pkey_free(r0) 10:22:46 executing program 5: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/174, 0xae}, {&(0x7f0000000180)=""/209, 0xd1}, {&(0x7f0000000280)=""/5, 0x5}], 0x4, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x80000000, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$sr(0xffffffffffffff9c, &(0x7f0000001d80), 0x4002, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f00000098c0)=[{{&(0x7f0000001dc0), 0x6e, &(0x7f0000002480)=[{&(0x7f0000001e40)=""/62, 0x3e}, {&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/166, 0xa6}, {&(0x7f0000001f80)=""/88, 0x58}, {&(0x7f0000002000)=""/196, 0xc4}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/141, 0x8d}, {&(0x7f0000002280)=""/208, 0xd0}, {&(0x7f0000002380)=""/253, 0xfd}], 0x9}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000004740)=[{&(0x7f00000025c0)=""/156, 0x9c}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)=""/52, 0x34}], 0x5}}, {{&(0x7f00000047c0), 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004840)=""/114, 0x72}, {&(0x7f00000048c0)=""/183, 0xb7}, {&(0x7f0000004980)=""/158, 0x9e}, {&(0x7f0000004a40)=""/119, 0x77}, {&(0x7f0000004ac0)=""/242, 0xf2}, {&(0x7f0000004bc0)=""/174, 0xae}, {&(0x7f0000004c80)}, {&(0x7f0000004cc0)=""/97, 0x61}, {&(0x7f0000004d40)=""/142, 0x8e}, {&(0x7f0000004e00)=""/250, 0xfa}], 0xa, &(0x7f0000004fc0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000005000), 0x6e, &(0x7f0000007380)=[{&(0x7f0000005080)=""/77, 0x4d}, {&(0x7f0000005100)=""/177, 0xb1}, {&(0x7f00000051c0)=""/4, 0x4}, {&(0x7f0000005200)=""/183, 0xb7}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/32, 0x20}, {&(0x7f0000006300)=""/50, 0x32}, {&(0x7f0000006340)}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x9}}, {{&(0x7f0000007440), 0x6e, &(0x7f0000008600)=[{&(0x7f00000074c0)=""/2, 0x2}, {&(0x7f0000007500)=""/33, 0x21}, {&(0x7f0000007540)=""/18, 0x12}, {&(0x7f0000007580)=""/6, 0x6}, {&(0x7f00000075c0)=""/64, 0x40}, {&(0x7f0000007600)=""/4096, 0x1000}], 0x6, &(0x7f0000008680)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000008700)=@abs, 0x6e, &(0x7f0000009880)=[{&(0x7f0000008780)=""/248, 0xf8}, {&(0x7f0000008880)=""/4096, 0x1000}], 0x2}}], 0x6, 0x180e2, &(0x7f0000009a80)={r1, r2+60000000}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000009ac0), 0xa00, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000009b80)={'syztnl2\x00', &(0x7f0000009b00)={'ip_vti0\x00', 0x0, 0x40, 0x20, 0xffff, 0x0, {{0xb, 0x4, 0x0, 0x3, 0x2c, 0x65, 0x0, 0x80, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, {[@lsrr={0x83, 0x3, 0x62}, @timestamp_addr={0x44, 0x14, 0x8a, 0x1, 0x6, [{@private=0xa010102, 0x7}, {@rand_addr=0x64010101, 0x6}]}]}}}}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f000000a3c0)=[{{0x0, 0x0, &(0x7f0000009bc0), 0x0, &(0x7f0000009c00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000009c80), 0x6e, &(0x7f0000009d40)=[{&(0x7f0000009d00)=""/20, 0x14}], 0x1, &(0x7f0000009d80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x108}}, {{&(0x7f0000009ec0), 0x6e, &(0x7f000000a080)=[{&(0x7f0000009f40)=""/151, 0x97}, {&(0x7f000000a000)=""/21, 0x15}, {&(0x7f000000a040)}], 0x3}}, {{&(0x7f000000a0c0)=@abs, 0x6e, &(0x7f000000a2c0)=[{&(0x7f000000a140)=""/219, 0xdb}, {&(0x7f000000a240)=""/74, 0x4a}], 0x2, &(0x7f000000a300)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}}], 0x4, 0x1, &(0x7f000000a4c0)={0x0, 0x3938700}) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f000000a500)) r5 = socket(0x5, 0x5, 0x5) accept4$bt_l2cap(r5, &(0x7f000000a540)={0x1f, 0x0, @none}, &(0x7f000000a580)=0xe, 0x80800) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f000000a800)=0x6643, 0x4) 10:22:46 executing program 7: sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x800) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc054) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6f1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x10001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c054}, 0x20000000) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8084}, 0x40000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000640)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x58, r0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffff7}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4044090) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) clock_gettime(0x0, &(0x7f0000007580)={0x0, 0x0}) recvmmsg$unix(r1, &(0x7f0000007480)=[{{&(0x7f00000007c0)=@abs, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/87, 0x57}, {&(0x7f00000018c0)=""/254, 0xfe}, {&(0x7f00000019c0)=""/48, 0x30}, {&(0x7f0000001a00)=""/1, 0x1}, {&(0x7f0000001a40)=""/5, 0x5}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x7, &(0x7f0000002b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000002bc0)=""/72, 0x48}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/135, 0x87}], 0x3, &(0x7f0000002dc0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f0000002e80)=@abs, 0x6e, &(0x7f0000005140)=[{&(0x7f0000002f00)=""/55, 0x37}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/32, 0x20}, {&(0x7f0000003f80)=""/254, 0xfe}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/141, 0x8d}], 0x6, &(0x7f00000051c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}}, {{0x0, 0x0, &(0x7f0000007400)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/151, 0x97}, {&(0x7f0000007380)=""/123, 0x7b}], 0x4, &(0x7f0000007440)=[@cred={{0x1c}}], 0x20}}], 0x4, 0x40002160, &(0x7f00000075c0)={r2, r3+10000000}) syz_genetlink_get_family_id$SEG6(&(0x7f0000007640), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f00000079c0)={&(0x7f0000007900)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000007980)={&(0x7f0000007940)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24008040) 10:22:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r8, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r9}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) 10:22:46 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r2) r5 = getpgid(r3) sched_rr_get_interval(r5, &(0x7f0000000600)) 10:22:46 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4800) write$bt_hci(r1, &(0x7f0000000080)={0x1, @disconnect={{0x406, 0x3}, {0x0, 0x5}}}, 0x7) pkey_free(r0) 10:22:46 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000c, 0x30, r1, 0x0) shmget(0x0, 0x2000, 0x78000000, &(0x7f0000ffe000/0x2000)=nil) recvmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000000140)=""/170, 0xaa}], 0x2, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x10043) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) accept4$packet(r2, &(0x7f0000000300), &(0x7f0000000340)=0x14, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000380)="f843d2cf4f1cf2702be4a740247a4f48082c97e61f2b77dc2367d42cc1151a82c331d30f11ca8009acde1888ee5b424e448573fefbbeb4d163c7c517181cb8f9e4917f14c4e1d1e9340e3fee168a9b7ee9db9375738198fe1f05b60d65f0bcc22fb7c2929adcc8baedfb1e888ef2954bb3c47fec75fcbeae33e9b4d387ddb7474a1b28d770f007aa50974fb3ccc9e4a8a9adb610f13db2b2bf64cd2b8c804029cbd9a4", 0xa3, r3}, 0x68) r4 = socket(0xa, 0x1, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f00000007c0), &(0x7f0000000800)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000880)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000840)="7eb7f5fb7f7eff0d1568d230b9b4c6c94473b533d4832123cab3fb8711e40fab8fcb07091b47053a8a1e02", 0x2b, r4}, 0x68) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r5 = socket(0x2, 0x6, 0x2e09) sendmsg$802154_dgram(r5, &(0x7f0000000a80)={&(0x7f0000000900)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14, &(0x7f0000000a40)={&(0x7f0000000940)="79f99785ca31391ea1fe908d53a86481d80714417052517b7425fe2d034c2e01b5871746a063917036b398c45bb835f62bb5a7fd479cda7be3bc7fceee45e7aa10fbf4c480dba8e319905348d128426756f084150b87c156170f788b75ad0631247ca6ac40ff3c87fd5370fb139b0a4dd54fa3118fb580ad93b0ce3d8655eea3489314d424c85d94399c5a61ce11e139a8f2c8965363fe68377df244d3598c442799d54460735a23d29bc2131757f078bf5702b0a3cb6b9b0084168cbddda87fba08d16bd0eaa5a34a8d6893a01817367f0bc927531ad0ac1fd0c677a7ba87d6b1", 0xe1}, 0x1, 0x0, 0x0, 0x4010}, 0x40020) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xe4e8c9978e7eefe6) ioctl$sock_bt_hci(r4, 0x400448e0, &(0x7f0000000bc0)="02cc241b11954bb08c2fbc78f781e2266f8866e0696cfd9498ff7078a1421b51acec4d3a9b9d124f0c8637d46f5d1dea97604d3ca93e535a84ae8dc3e3edbd3b639d8d2aee5ec07e38dce696158fb92c7597dfafffe98cd0615a6f733581a3f254970b177ec6b029355757cbf12824cc73e4058d6ca9d56de2a594c278866a338ef679ab379969b93fdc4a4f7e6da33905d5bf1ccd872c2a49f2463ad4587d9d9f624682792ba081a984a357e2d6f865ff3b618a847761d5e534935fb3358d6c7523f392b335b358e90251b1b6aec236d9bc7a766c8c9a7937d1") bind$bt_hci(r2, &(0x7f0000000cc0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x38, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x34, 0x0, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 10:22:46 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pipe2(&(0x7f0000000040), 0x4800) pkey_free(r0) 10:22:46 executing program 4: syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), 0xffffffffffffffff) r0 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r0) r1 = socket(0x2, 0xa, 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x40}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0x400c840) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0xc010) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000340)) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r0) io_uring_setup(0x5017, &(0x7f00000003c0)={0x0, 0xa74e, 0x0, 0x0, 0x29b, 0x0, r3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)) syz_genetlink_get_family_id$batadv(&(0x7f00000063c0), 0xffffffffffffffff) 10:22:46 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x7f, 0x0, 0xffffffe1, 0x13, @mcast2, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x20, 0x40, 0x6, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r0, 0x7800, 0x20, 0x8, 0x3, {{0xf, 0x4, 0x0, 0x3, 0x3c, 0x67, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @broadcast, {[@ssrr={0x89, 0x1b, 0x24, [@dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010100, @loopback, @multicast1]}, @generic={0x88, 0xd, "2532ebb94d547fc6eac0b8"}]}}}}}) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000180), 0x181ac0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x404, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000050}, 0x80) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20000}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8000, 0x7800, 0x1, 0xffffffff, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x68, 0x0, 0x3f, 0x2f, 0x0, @private=0xa010100, @multicast1, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xc, "e669a4e43ddeb770cae9"}, {0x5, 0x10, "6c36d4aacbcb37cb1db8b00944b7"}, {0x7, 0x7, "fcd63f0310"}]}, @rr={0x7, 0xb, 0xad, [@broadcast, @loopback]}]}}}}}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x4040) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r2, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x51}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4081}, 0xc004) recvmsg$unix(r1, &(0x7f0000001a40)={&(0x7f00000006c0)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000000740)=""/76, 0x4c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/246, 0xf6}], 0x3, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}, 0xa003) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001ac0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000001b80)={'tunl0\x00', &(0x7f0000001b00)={'syztnl1\x00', r8, 0x8000, 0x28, 0x4, 0x3ff, {{0x12, 0x4, 0x1, 0x37, 0x48, 0x65, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "25011271c133"}, @rr={0x7, 0x17, 0x49, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @rr={0x7, 0x13, 0x95, [@multicast1, @remote, @multicast1, @broadcast]}]}}}}}) pipe2(&(0x7f0000001bc0), 0x800) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c40)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}}, 0x1) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000001d00)=0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000001d40)={'\x00', 0x56, 0x64, 0x7, 0x180000, 0x3ff, r9}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) 10:22:46 executing program 0: r0 = pkey_alloc(0x0, 0x1) pkey_alloc(0x0, 0x2) pkey_alloc(0x0, 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, @none, 0xd696, 0x2}, 0xe) pkey_free(r0) 10:22:46 executing program 3: pkey_alloc(0x0, 0x2) ioctl$INOTIFY_IOC_SETNEXTWD(0xffffffffffffffff, 0x40044900, 0xaf) r0 = socket(0x3, 0x4, 0x8) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x30, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x2}, 0xe) pkey_alloc(0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x200, 0x1, {{0x5, 0x4, 0x0, 0x7, 0x14, 0x66, 0x0, 0x5, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010101}}}}) recvmmsg$unix(r0, &(0x7f0000004880)=[{{&(0x7f0000000140)=@abs, 0x6e, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000200)=""/218, 0xda}, {&(0x7f0000000300)=""/164, 0xa4}, {&(0x7f00000003c0)=""/30, 0x1e}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/241, 0xf1}, {&(0x7f0000001500)=""/185, 0xb9}, {&(0x7f00000015c0)=""/114, 0x72}, {&(0x7f0000001640)=""/105, 0x69}, {&(0x7f00000016c0)=""/61, 0x3d}], 0xa, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x130}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/104, 0x68}, {&(0x7f00000019c0)=""/158, 0x9e}, {&(0x7f0000001a80)=""/96, 0x60}, {&(0x7f0000001b00)=""/217, 0xd9}, {0xfffffffffffffffd}], 0x6, &(0x7f0000001c80)}}, {{&(0x7f0000001cc0), 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001d40)=""/96, 0x60}], 0x1, &(0x7f0000001e00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001e40), 0x6e, &(0x7f00000022c0)=[{&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/213, 0xd5}, {&(0x7f0000002000)=""/175, 0xaf}, {&(0x7f00000020c0)}, {&(0x7f0000002100)=""/245, 0xf5}, {&(0x7f0000002200)=""/159, 0x9f}], 0x6, &(0x7f0000002340)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c}}], 0x80}}, {{&(0x7f00000023c0), 0x6e, &(0x7f00000034c0)=[{&(0x7f0000002440)=""/11, 0xb}, {&(0x7f0000002480)}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x3, &(0x7f0000003500)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}}, {{&(0x7f0000003680)=@abs, 0x6e, &(0x7f0000004700)=[{&(0x7f0000003700)=""/4096, 0x1000}], 0x1, &(0x7f0000004740)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x120}}], 0x6, 0x2, &(0x7f0000004a00)={0x77359400}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000004a40)={'\x00', 0x6, 0x5, 0x7, 0x280000000000000, 0x4, r5}) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x40044900, 0x3) msgrcv(0xffffffffffffffff, &(0x7f0000004ac0)={0x0, ""/52}, 0x3c, 0x3, 0x800) socket$packet(0x11, 0x2, 0x300) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000004e40)={{0x1, 0x0, 0x0, r2, r3, 0xf3, 0x9}, 0x0, 0x0, 0x6, 0x6, 0x4, 0x3, 0x216, 0xffc0, 0x8, 0x2, 0xffffffffffffffff}) 10:22:46 executing program 6: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0x44800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x267, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24006050}, 0x811) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000280)=0x10000, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x88000, 0x0) r3 = getpgrp(0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x8001, 0x7fffffff, 0xd6, 0x0, 0x9, r3}) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000380)=0x5, 0x4) clock_gettime(0x1, &(0x7f00000003c0)) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'tunl0\x00', 0x0, 0x1, 0x700, 0x8, 0x101, {{0x12, 0x4, 0x0, 0x4, 0x48, 0x66, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x7, 0x29, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0x3, [{@loopback, 0x4}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x24c5}]}]}}}}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) r5 = getpgid(r3) sched_rr_get_interval(r5, &(0x7f0000000600)) VM DIAGNOSIS: 10:22:39 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffff88800d5e7720 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff817da153 RDI=ffff88800d5e772c RBP=000000000000000c RSP=ffff88800d5e7638 R8 =ffffffff85f21c22 R9 =ffffffff85f21c26 R10=ffffed1001abced8 R11=ffff88800d5e7698 R12=ffff88800d5e7720 R13=0000000000000000 R14=ffff88800ff09ac0 R15=0000000000000000 RIP=ffffffff81359cd2 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f2f43f79700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f9836ad5990 CR3=000000000f00c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 2038333a32323a30 312033202074634f YMM01=0000000000000000 0000000000000000 5d3332303237362e 30383120205b203a YMM02=0000000000000000 0000000000000000 747320493a657461 7473202020202020 YMM03=0000000000000000 0000000000000000 202020202020323a 6469707020202020 YMM04=0000000000000000 0000000000000000 6620202020202032 3a64697070202020 YMM05=0000000000000000 0000000000000000 61747320493a6574 6174732020202020 YMM06=0000000000000000 0000000000000000 205d333230323736 2e30383120205b20 YMM07=0000000000000000 0000000000000000 732038333a32323a 3031203320207463 YMM08=0000000000000000 0000000000000000 312e726f74756365 78652d7a7973223d YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000053 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000053 R11=0000000000000001 R12=0000000000000053 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8d91388650 CR3=0000000018b7e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 41029e4000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000ea8a40 00000000005baf0c YMM05=0000000000000000 0000000000000000 000000c0001db398 00000000008e84e0 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 000000c00074e000 00000000004643c1 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 000000c00017a660 000000c00017a630 YMM14=0000000000000000 0000000000000000 000000c00017a6c0 000000c00017a690 YMM15=0000000000000000 0000000000000000 000000c000105080 000000c00017a6f0