Warning: Permanently added '[localhost]:21555' (ECDSA) to the list of known hosts. 2022/10/03 23:58:50 fuzzer started 2022/10/03 23:58:50 dialing manager at localhost:35095 syzkaller login: [ 39.628431] cgroup: Unknown subsys name 'net' [ 39.724421] cgroup: Unknown subsys name 'rlimit' 2022/10/03 23:59:06 syscalls: 201 2022/10/03 23:59:06 code coverage: enabled 2022/10/03 23:59:06 comparison tracing: enabled 2022/10/03 23:59:06 extra coverage: enabled 2022/10/03 23:59:06 setuid sandbox: enabled 2022/10/03 23:59:06 namespace sandbox: enabled 2022/10/03 23:59:06 Android sandbox: enabled 2022/10/03 23:59:06 fault injection: enabled 2022/10/03 23:59:06 leak checking: enabled 2022/10/03 23:59:06 net packet injection: enabled 2022/10/03 23:59:06 net device setup: enabled 2022/10/03 23:59:06 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 23:59:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 23:59:06 USB emulation: enabled 2022/10/03 23:59:06 hci packet injection: enabled 2022/10/03 23:59:06 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 23:59:06 802.15.4 emulation: enabled 2022/10/03 23:59:06 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 23:59:07 starting 8 fuzzer processes 23:59:07 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r7, 0x5302) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000005600)={{0x3, 0x1, 0x2000, 0x2, 0x10000, 0xeb}, 0x166, [0x7a, 0x9, 0x4, 0x0, 0x1a1, 0x4, 0x400, 0x8001, 0x5, 0x80000001, 0x0, 0x1, 0x9, 0x100, 0xfff, 0x2, 0x1, 0x0, 0xffffffff, 0x10000000, 0xfffffffd, 0x7, 0x80000000, 0xff, 0xd07, 0x7f, 0x4, 0x0, 0x8, 0x7ff, 0x76cb, 0x9, 0x8, 0x8, 0x7, 0xa057, 0x800, 0x2, 0x2, 0x101, 0xfffffffd, 0x8, 0x59, 0x2, 0x90e, 0x8, 0x10001, 0xfff, 0x2, 0x7f, 0xba5f, 0x1f, 0x200, 0xfffffff9, 0xffffffff, 0x0, 0x6, 0x9, 0x25635741, 0x9, 0x40, 0x6, 0xff, 0x80000001, 0x985, 0x8000, 0x610, 0x7, 0x2, 0x7, 0x1f, 0xf0, 0x7fff, 0x6, 0x3, 0x1, 0x101, 0x2, 0x8000, 0x5, 0x80000001, 0x9, 0x7, 0x7, 0x8, 0x2, 0x8001, 0x9, 0x8, 0x1, 0x6ba2f68b, 0xbb, 0x100, 0x2, 0x4, 0x7, 0x10000, 0x10001, 0x7fffffff, 0x0, 0x0, 0x8, 0xfffffffd, 0x4d7c, 0x10000, 0xab84, 0x3ff, 0x80, 0x7, 0x8, 0x101, 0xaa8a, 0x4, 0x1f, 0x35a, 0x9fb, 0x3f, 0xffff, 0x7, 0x9, 0xf9, 0x63, 0x2, 0x6, 0x2, 0x0, 0x0, 0x20, 0x97, 0x7, 0x1, 0x1, 0x1, 0xfffffff7, 0x8, 0x2, 0x3ac, 0x8000, 0xc5f, 0x7, 0xd79, 0x4, 0x8000, 0x4, 0x1, 0x60b24573, 0x100, 0xffffffff, 0x6f, 0x4, 0x6, 0x6cbd0e15, 0x9, 0x5, 0x5, 0x5, 0x1, 0x72, 0x0, 0x21b, 0x200, 0x545, 0x0, 0x9, 0xfff, 0xffffffff, 0x2, 0xbd5a, 0x9, 0x9, 0x8, 0x280, 0x1, 0x7ff, 0x2, 0xfffff642, 0x4, 0xffffffff, 0x3, 0x4, 0x400, 0x1, 0x2, 0x0, 0x7, 0x4, 0x9, 0x1, 0x9, 0x6, 0x100, 0x20, 0x7f, 0x2f, 0x6, 0x2, 0x3, 0x6, 0xbffd, 0x9, 0x401, 0x5, 0xfff, 0x3, 0x9, 0x6, 0xfff, 0x4, 0x7, 0x57, 0x9, 0x7, 0x0, 0x8be3, 0x1f, 0x40000000, 0x100000, 0x4, 0xf5b, 0x5d, 0xffffffff, 0x3, 0xab, 0x8444, 0x0, 0x8000, 0xc3, 0x0, 0x0, 0xcae, 0x75c, 0x800, 0x5, 0x0, 0x1000, 0x1000, 0x5ee4, 0x7fff, 0xfffffffd, 0x9, 0x1, 0x2, 0x5, 0x3ff, 0x4, 0x3, 0x9, 0x9e, 0x0, 0x63, 0x0, 0x7, 0x2, 0x9c, 0x915a550, 0x10001, 0x6, 0xfffffffd, 0xfffffffc, 0x1, 0x8, 0x1, 0x9, 0x2, 0x401, 0x3f, 0x40000, 0x4, 0x7, 0x8b5, 0x6, 0x80000000, 0xfff, 0xffff, 0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0xfffff000, 0x0, 0x3, 0x1, 0x3, 0x4, 0xfffffff8, 0x1f, 0x9, 0x3, 0x5, 0x5, 0x6ac46459, 0x2, 0x9c, 0x980, 0x6, 0x8000, 0x68, 0xb4, 0x4, 0x10000, 0x5e, 0x9, 0x6c3, 0x6, 0x3ff, 0x3, 0x6, 0x1ff, 0x2, 0x9ebb, 0x4, 0x3c0d, 0x3, 0x6d4c, 0x0, 0x0, 0x5, 0x7931a51b, 0x9, 0x6, 0x7, 0x80000001, 0x6, 0xfffff255, 0x7f, 0x3, 0x2, 0x1, 0x4, 0xfffffbbe, 0x6, 0x9, 0x9e, 0x8, 0x3, 0xff, 0xa6, 0xffff, 0x18, 0x1000, 0x6, 0x0, 0x8, 0x1, 0xe0, 0x8000, 0x401, 0x0, 0x7f, 0x800, 0x7fffffff, 0x7, 0x1, 0x5, 0x8001, 0x9, 0x5, 0xf6000000, 0x8001, 0x2, 0x8001, 0x6, 0x7fffffff, 0x7f, 0x200, 0x7, 0x10000, 0x2, 0xfff, 0xfa9, 0xdb3, 0x1c, 0xfffffab2, 0x368f, 0x0, 0x80000000, 0x2, 0xffff0001, 0xd37, 0x9, 0x8, 0x80000000, 0x5, 0x5, 0x2, 0x80, 0x101, 0x9, 0x8, 0x6, 0x8, 0x4, 0xffffff01, 0x8, 0x101, 0x5, 0x7fffffff, 0xa0, 0x853, 0x2, 0x5, 0x9, 0x1, 0x4, 0x2c89, 0x100, 0x945, 0x5, 0x4, 0x15, 0x2, 0x0, 0x6, 0x5, 0x9, 0x8, 0x0, 0x80000001, 0x6, 0x4, 0x1f, 0xfff, 0x4, 0x7, 0xffffdff0, 0x80000001, 0xb06, 0x30b, 0x2, 0x5, 0x3f, 0x4, 0x6, 0x70, 0x2, 0x40d7, 0xfffffff9, 0x1, 0x7fc14d85, 0x8001, 0x20, 0x10000, 0x5, 0x1f, 0x0, 0x9, 0x0, 0xfffff000, 0x9a5c, 0x4, 0x9, 0x1ff, 0x509, 0x4, 0xff, 0x36, 0x8, 0x2, 0x9c6, 0x1, 0x1, 0xdd29, 0x1, 0x0, 0xfffffffa, 0x4, 0xfff, 0x1, 0x4c7, 0x9, 0x7, 0x80, 0x9, 0x5, 0x4, 0x5, 0x10000, 0xfa3, 0x7, 0x8, 0x6, 0xffffffff, 0xe1, 0x7, 0x3, 0x5, 0x7ff, 0x0, 0x9, 0x6, 0x2, 0x1093, 0x56ef, 0x6, 0x7ff, 0x1, 0x8, 0x9, 0x2, 0x6, 0x7ff, 0x400, 0x40, 0x20, 0x7f, 0x400, 0x9, 0x8001, 0xa00d, 0x50, 0x0, 0x1, 0x1fffc000, 0x100, 0x80000001, 0x40, 0xffffff5d, 0x101, 0x8001, 0x7fffffff, 0x20, 0x3, 0x3e, 0x92, 0x0, 0x7fffffff, 0x3, 0x1, 0x8, 0x1808, 0xf08, 0x4, 0xb25, 0x23, 0x1, 0x80, 0x40, 0x2, 0xfffffff9, 0xf999, 0x1, 0x7ff, 0x57d, 0x6, 0x3, 0x1, 0x0, 0xd44, 0x5, 0x1, 0x400, 0xb8, 0x2, 0x4, 0x0, 0x3, 0x4b1, 0x7, 0x4, 0xfffffffc, 0x9, 0x9, 0x7fffffff, 0x5, 0x9, 0x1, 0x8, 0x6, 0x0, 0x1, 0xa0, 0x261f025b, 0x0, 0x80000000, 0xffff7bd5, 0x8, 0x68c, 0x2b, 0x8, 0x4, 0x4, 0x0, 0x1, 0x8a19, 0x175, 0xe7e, 0x5b7a, 0x3, 0x20, 0x1400000, 0x1, 0x4, 0x40, 0x131d, 0x80000000, 0x200, 0x1, 0x8, 0x6, 0xe9a, 0xdb, 0xfffffff8, 0x0, 0x1f, 0x10000, 0x9, 0xffffffff, 0x5, 0x40, 0x383bcc9a, 0x3ff, 0x7fff, 0x2, 0x200, 0x105, 0x7, 0x401, 0x2, 0xffff, 0x1, 0x824, 0x0, 0x3f, 0x3, 0x1f, 0x9, 0x9, 0x8, 0x20, 0x400, 0x1, 0x0, 0xfffff800, 0x101, 0x7f, 0x98, 0x1000, 0x4, 0x2d, 0x3, 0x5, 0x3, 0xfffffffb, 0xfffffffb, 0x100, 0x5, 0x4, 0x7, 0x0, 0x0, 0x1, 0x5, 0x5, 0x4, 0x3, 0x4e, 0xba3a, 0x8, 0xa69c, 0x100, 0x0, 0x7, 0x2, 0x8, 0x2, 0x3, 0x6, 0x1, 0x7fffffff, 0x7, 0xafb2, 0x100, 0xc9ba, 0x1ff, 0x79e, 0x3, 0x9, 0x6, 0x9, 0x2, 0x9, 0x3, 0x0, 0x8, 0x10001, 0x9, 0x56e1, 0x5, 0x9, 0x3, 0x6, 0x51, 0x1000, 0x8, 0x5, 0x9c0, 0x8000, 0x8, 0x8, 0x6, 0x8001, 0x80000000, 0x10001, 0x0, 0xccf2, 0x5, 0x7f, 0x8000, 0x6, 0x3, 0x4b, 0x2, 0x2, 0x101, 0x9, 0x48000, 0x9, 0x101, 0x2, 0x5, 0xfffff800, 0x3, 0x5, 0x75a0, 0xe224, 0xbea8da52, 0x40000000, 0xcbc, 0xff, 0x1000, 0x7fff, 0x0, 0x4000, 0xbb, 0x9, 0x101, 0x20, 0x8, 0x5, 0x2, 0x7fffffff, 0xfffffffd, 0x6c, 0x200, 0x1, 0x4, 0x0, 0x9, 0x80, 0x7f, 0x0, 0x18000, 0xf4, 0x0, 0x1, 0xff, 0xfff, 0x9, 0x2, 0x9, 0x4, 0x8000, 0x8, 0x20, 0xfff, 0x3, 0x9, 0x420, 0x6, 0x6, 0x7fffffff, 0x3, 0x6, 0x5, 0x5, 0x2, 0x7, 0x1, 0x3, 0x3, 0x200, 0x1, 0x10001, 0x100, 0x7, 0x9, 0x7ff, 0xff, 0x9, 0x3b02fe00, 0x1f, 0x6, 0x7fff, 0x6833fb70, 0x4, 0x5, 0x9, 0x6, 0x4, 0x9, 0x800, 0x6, 0x6, 0x6, 0x7, 0x39f, 0xf8000, 0x8, 0x1ff, 0x1, 0x9, 0x6, 0x0, 0x0, 0x6, 0x2, 0x8, 0x1, 0x7, 0x70, 0x6, 0x5, 0x758, 0xfffffff9, 0xf8ec563f, 0x3ff, 0x4, 0x0, 0xfe, 0xfffffffb, 0x101, 0x4, 0x80, 0xc01c, 0x7fff, 0x9, 0x7fff, 0x8, 0x9, 0x100, 0x3800000, 0x200, 0xa8d, 0x6, 0x62d5, 0x6, 0xffffffe1, 0x6, 0x20c00000, 0x49e, 0x3, 0x8, 0x401, 0x40, 0x80000001, 0x8, 0x1, 0xffff0001, 0x7, 0x2, 0x7, 0x0, 0x0, 0x0, 0xf, 0xe136, 0x0, 0x3ff, 0x80000000, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5a5, 0xff, 0x7, 0x4, 0xc6f5, 0xffffffff, 0x5cd7, 0x10000, 0x401, 0xffff, 0x9, 0x0, 0x4c, 0x7, 0x6, 0x7, 0x0, 0x79f, 0x8, 0x6, 0xffffffff, 0x5, 0xe8, 0x4, 0x1, 0xbc6, 0x7c5, 0x4, 0x81, 0x2, 0xffffffe0, 0xffff, 0x3, 0x7, 0x1, 0x8, 0x400, 0xb4, 0x3, 0x80000000, 0x3, 0x4be, 0x7fffffff, 0x5, 0x1, 0x2bd7e0d9, 0x5, 0x1, 0xffffffff, 0xfffffff7, 0x83, 0x400, 0x9, 0x6280a1c7, 0x101, 0x6, 0x6, 0x1ff, 0xffffffff, 0x99, 0x100, 0x1, 0x7, 0x0, 0xff, 0x8, 0x3, 0x80000000, 0x7, 0x9, 0x80000000, 0x0, 0x7, 0x1, 0x100, 0xfffffffb, 0x9, 0x5, 0xa0, 0xccf, 0x6, 0x0, 0xfffffffc, 0xffffffff, 0x7c4, 0x3ed, 0xff, 0x569c, 0x2, 0x7a, 0x6e82, 0x6, 0x9, 0x1, 0x0, 0x80, 0x1, 0x4, 0x7, 0x1, 0x8, 0x81, 0x31c, 0x7, 0x2400000, 0x6, 0x9, 0x1, 0x81, 0x80, 0xff, 0x162df04c, 0x2, 0x1f37, 0x2, 0x7fffffff, 0x3ff, 0xec, 0x383b, 0x401, 0x6, 0x61, 0x8000, 0x2, 0x1a4, 0x3, 0x2, 0x8000, 0x7fffffff, 0x3, 0xe00000, 0x2, 0x0, 0x3, 0x7, 0x6, 0x40, 0x8d2, 0x3, 0xfffffffd, 0x2, 0x1, 0x3ff, 0x401, 0x7fffffff, 0x89, 0x0, 0x2c, 0xf1e]}) 23:59:07 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000c80)=""/58) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r7, 0x5328) 23:59:07 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7, 0xdc8, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x1, 0x7, 0x0, 0x6}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) pipe2$9p(&(0x7f0000000600), 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r5 = socket(0x1, 0x2, 0x200) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', r4, 0x10, 0x80, 0xb6, 0x1, {{0x35, 0x4, 0x2, 0x13, 0xd4, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@local, 0x5393cd27}]}, @end, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "c6b72b"}]}, @cipso={0x86, 0x6, 0x3}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0xf, "0bb4fd59a3c514919a54c4c542"}, {0x2, 0x9, "7baa19dd47edfb"}, {0x0, 0xf, "0bf17ba14f0de8e474788472d3"}, {0x5, 0x4, "4a1b"}, {0x0, 0x7, "4ae136b64c"}, {0x6, 0x3, "b3"}, {0x7, 0x12, "aaa384a434da346d3c51240c5da4ece0"}, {0x7, 0xe, "c4b898ec8abcf2853a2d9c07"}, {0x1, 0xb, "fa91d33d3a059aefb1"}]}, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x6, [0xff, 0x1ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x95, [@broadcast, @empty, @multicast1, @local, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x7, [{@empty, 0x4}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x810) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}}, 0x20004040) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c00)={0x1, 0xc1, 0x7, 0x54, 0xe, 0x3f}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 23:59:07 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001880)={0x2, 0x3, 0x4}) sendmsg$sock(r2, &(0x7f0000001cc0)={&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001940)="a5650766cce5956b60ce0d16e68473ab39b6ca666f806294497d5f6c95e340d461ce2d1ebd8d11547993a15cbaee2cf159c25dca94addd10f2769492425066cd2cef621cb402ab7d77fc648c0fc6", 0x4e}, {&(0x7f00000019c0)="f3b7a05e8e631e0b02fbd19067c2314a4f6d3827ca471fa229a03901e1555da2e3459d4a89db0cdcd0053056fc072e4a79b2305eae03e5f70ab05197c900e7e8a24eb60a01a6b0648530cb6fd6365067958376976a2b0109c440c07a2f772ab51873ab06d24e7b86fe58a01d0db35c53a83327db7446fa154b63a74fa7849d41dbaec4f36ddcb2b7fdbbbf10a29d4c55102a1864d83f2d78e92622a7baae7e837780b122ea565a5ddb70f7fbc493981fa1b4afb3300bf265cbeca3468bbd50ce318721ddbb738af456d926ab19c3", 0xce}, {&(0x7f0000001ac0)="534c9319eaff57a27612055b37d4ecbcb181feafc8d24c6194fd6a4390753f1595057ea13ce387", 0x27}, {&(0x7f0000001b00)="3c9607eca55fbcd0ce8a28794643d3db4d03db18951a29552a17e753bd5a649b94e67d590305426260d16956071a7283884135a7c5dbbadc56183e72ddd5a32eefae7b35bc9fba", 0x47}], 0x4, &(0x7f0000001bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xca}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}, 0x4000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000001d40)={0x1, 0x7ffffcff, 0x7, 0x10000, 0x800, 0x3}) 23:59:07 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) [ 56.607230] audit: type=1400 audit(1664841547.973:6): avc: denied { execmem } for pid=284 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 23:59:08 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) ioctl$HIDIOCINITREPORT(r11, 0x4805, 0x0) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x7) 23:59:08 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x50901132}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) 23:59:08 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/85, 0x55}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/49, 0x31}], 0x6, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/174, 0xae}, {&(0x7f0000001840)=""/18, 0x12}], 0x2, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/128, 0x80}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/193, 0xc1}], 0x7, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/211, 0xd3}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/12, 0xc}], 0x7, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x6, 0x12003, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000029c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002a00)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r13, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x2000004) recvmsg$unix(r6, &(0x7f0000003240)={&(0x7f0000002b80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/208, 0xd0}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/166, 0xa6}], 0x7, &(0x7f00000031c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40006110) recvmmsg$unix(r14, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/17, 0x11}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/100, 0x64}], 0x7, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x2082, &(0x7f0000005c40)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, &(0x7f0000005c80), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000005d80)={'syztnl1\x00', &(0x7f0000005d00)={'syztnl1\x00', r11, 0x29, 0x9, 0x7, 0x4, 0x2, @remote, @mcast1, 0x7800, 0x700, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e40)={&(0x7f0000005dc0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f00), r8) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000006000)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x54, r16, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x870}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000006040)={0x7, 0x3, 0x0, 0x6f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r13, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48800) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x1086a0}, 0xc, &(0x7f0000006280)={&(0x7f0000006200)={0x48, r17, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004825}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x14, r13, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008040}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000006500)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000064c0)={&(0x7f0000006480)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x10) [ 57.991178] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.993062] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.994701] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.996524] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.998927] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.000325] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.001660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.003045] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.004281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.030873] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.032161] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.033709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.040386] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.042594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.043716] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.045453] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.047565] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.048370] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.049627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.050510] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.051161] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.052333] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.053208] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.054993] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.056157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.057243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.061946] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.062068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.063965] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.065525] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.068142] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.069303] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.072895] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.075339] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.099312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.101258] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.102871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.104446] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.108740] Bluetooth: hci7: HCI_REQ-0x0c1a [ 58.109199] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.111489] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.119535] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.123042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.124591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.129671] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.145992] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.152025] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.156232] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.165153] Bluetooth: hci6: HCI_REQ-0x0c1a [ 60.054793] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 60.118260] Bluetooth: hci1: command 0x0409 tx timeout [ 60.119475] Bluetooth: hci7: command 0x0409 tx timeout [ 60.119972] Bluetooth: hci2: command 0x0409 tx timeout [ 60.120421] Bluetooth: hci3: command 0x0409 tx timeout [ 60.120897] Bluetooth: hci0: command 0x0409 tx timeout [ 60.181951] Bluetooth: hci6: command 0x0409 tx timeout [ 60.182645] Bluetooth: hci4: command 0x0409 tx timeout [ 62.166948] Bluetooth: hci0: command 0x041b tx timeout [ 62.167382] Bluetooth: hci3: command 0x041b tx timeout [ 62.167785] Bluetooth: hci2: command 0x041b tx timeout [ 62.168169] Bluetooth: hci7: command 0x041b tx timeout [ 62.168532] Bluetooth: hci1: command 0x041b tx timeout [ 62.230883] Bluetooth: hci4: command 0x041b tx timeout [ 62.231333] Bluetooth: hci6: command 0x041b tx timeout [ 62.619316] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 62.620522] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 62.621572] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 62.623589] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 62.625103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 62.626047] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 62.629097] Bluetooth: hci5: HCI_REQ-0x0c1a [ 64.214837] Bluetooth: hci1: command 0x040f tx timeout [ 64.215318] Bluetooth: hci7: command 0x040f tx timeout [ 64.215776] Bluetooth: hci2: command 0x040f tx timeout [ 64.216249] Bluetooth: hci3: command 0x040f tx timeout [ 64.216681] Bluetooth: hci0: command 0x040f tx timeout [ 64.278806] Bluetooth: hci6: command 0x040f tx timeout [ 64.279254] Bluetooth: hci4: command 0x040f tx timeout [ 64.661840] Bluetooth: hci5: command 0x0409 tx timeout [ 66.262846] Bluetooth: hci0: command 0x0419 tx timeout [ 66.263326] Bluetooth: hci3: command 0x0419 tx timeout [ 66.263732] Bluetooth: hci2: command 0x0419 tx timeout [ 66.264284] Bluetooth: hci7: command 0x0419 tx timeout [ 66.264685] Bluetooth: hci1: command 0x0419 tx timeout [ 66.325822] Bluetooth: hci4: command 0x0419 tx timeout [ 66.326322] Bluetooth: hci6: command 0x0419 tx timeout [ 66.709845] Bluetooth: hci5: command 0x041b tx timeout [ 68.757799] Bluetooth: hci5: command 0x040f tx timeout [ 70.805833] Bluetooth: hci5: command 0x0419 tx timeout 00:00:00 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001880)={0x2, 0x3, 0x4}) sendmsg$sock(r2, &(0x7f0000001cc0)={&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001940)="a5650766cce5956b60ce0d16e68473ab39b6ca666f806294497d5f6c95e340d461ce2d1ebd8d11547993a15cbaee2cf159c25dca94addd10f2769492425066cd2cef621cb402ab7d77fc648c0fc6", 0x4e}, {&(0x7f00000019c0)="f3b7a05e8e631e0b02fbd19067c2314a4f6d3827ca471fa229a03901e1555da2e3459d4a89db0cdcd0053056fc072e4a79b2305eae03e5f70ab05197c900e7e8a24eb60a01a6b0648530cb6fd6365067958376976a2b0109c440c07a2f772ab51873ab06d24e7b86fe58a01d0db35c53a83327db7446fa154b63a74fa7849d41dbaec4f36ddcb2b7fdbbbf10a29d4c55102a1864d83f2d78e92622a7baae7e837780b122ea565a5ddb70f7fbc493981fa1b4afb3300bf265cbeca3468bbd50ce318721ddbb738af456d926ab19c3", 0xce}, {&(0x7f0000001ac0)="534c9319eaff57a27612055b37d4ecbcb181feafc8d24c6194fd6a4390753f1595057ea13ce387", 0x27}, {&(0x7f0000001b00)="3c9607eca55fbcd0ce8a28794643d3db4d03db18951a29552a17e753bd5a649b94e67d590305426260d16956071a7283884135a7c5dbbadc56183e72ddd5a32eefae7b35bc9fba", 0x47}], 0x4, &(0x7f0000001bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xca}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}, 0x4000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000001d40)={0x1, 0x7ffffcff, 0x7, 0x10000, 0x800, 0x3}) 00:00:00 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001880)={0x2, 0x3, 0x4}) sendmsg$sock(r2, &(0x7f0000001cc0)={&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001940)="a5650766cce5956b60ce0d16e68473ab39b6ca666f806294497d5f6c95e340d461ce2d1ebd8d11547993a15cbaee2cf159c25dca94addd10f2769492425066cd2cef621cb402ab7d77fc648c0fc6", 0x4e}, {&(0x7f00000019c0)="f3b7a05e8e631e0b02fbd19067c2314a4f6d3827ca471fa229a03901e1555da2e3459d4a89db0cdcd0053056fc072e4a79b2305eae03e5f70ab05197c900e7e8a24eb60a01a6b0648530cb6fd6365067958376976a2b0109c440c07a2f772ab51873ab06d24e7b86fe58a01d0db35c53a83327db7446fa154b63a74fa7849d41dbaec4f36ddcb2b7fdbbbf10a29d4c55102a1864d83f2d78e92622a7baae7e837780b122ea565a5ddb70f7fbc493981fa1b4afb3300bf265cbeca3468bbd50ce318721ddbb738af456d926ab19c3", 0xce}, {&(0x7f0000001ac0)="534c9319eaff57a27612055b37d4ecbcb181feafc8d24c6194fd6a4390753f1595057ea13ce387", 0x27}, {&(0x7f0000001b00)="3c9607eca55fbcd0ce8a28794643d3db4d03db18951a29552a17e753bd5a649b94e67d590305426260d16956071a7283884135a7c5dbbadc56183e72ddd5a32eefae7b35bc9fba", 0x47}], 0x4, &(0x7f0000001bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xca}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}, 0x4000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000001d40)={0x1, 0x7ffffcff, 0x7, 0x10000, 0x800, 0x3}) 00:00:00 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001880)={0x2, 0x3, 0x4}) sendmsg$sock(r2, &(0x7f0000001cc0)={&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001940)="a5650766cce5956b60ce0d16e68473ab39b6ca666f806294497d5f6c95e340d461ce2d1ebd8d11547993a15cbaee2cf159c25dca94addd10f2769492425066cd2cef621cb402ab7d77fc648c0fc6", 0x4e}, {&(0x7f00000019c0)="f3b7a05e8e631e0b02fbd19067c2314a4f6d3827ca471fa229a03901e1555da2e3459d4a89db0cdcd0053056fc072e4a79b2305eae03e5f70ab05197c900e7e8a24eb60a01a6b0648530cb6fd6365067958376976a2b0109c440c07a2f772ab51873ab06d24e7b86fe58a01d0db35c53a83327db7446fa154b63a74fa7849d41dbaec4f36ddcb2b7fdbbbf10a29d4c55102a1864d83f2d78e92622a7baae7e837780b122ea565a5ddb70f7fbc493981fa1b4afb3300bf265cbeca3468bbd50ce318721ddbb738af456d926ab19c3", 0xce}, {&(0x7f0000001ac0)="534c9319eaff57a27612055b37d4ecbcb181feafc8d24c6194fd6a4390753f1595057ea13ce387", 0x27}, {&(0x7f0000001b00)="3c9607eca55fbcd0ce8a28794643d3db4d03db18951a29552a17e753bd5a649b94e67d590305426260d16956071a7283884135a7c5dbbadc56183e72ddd5a32eefae7b35bc9fba", 0x47}], 0x4, &(0x7f0000001bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xca}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}, 0x4000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) ioctl$HIDIOCSUSAGE(r4, 0x4018480c, &(0x7f0000001d40)={0x1, 0x7ffffcff, 0x7, 0x10000, 0x800, 0x3}) 00:00:00 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001880)={0x2, 0x3, 0x4}) sendmsg$sock(r2, &(0x7f0000001cc0)={&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001940)="a5650766cce5956b60ce0d16e68473ab39b6ca666f806294497d5f6c95e340d461ce2d1ebd8d11547993a15cbaee2cf159c25dca94addd10f2769492425066cd2cef621cb402ab7d77fc648c0fc6", 0x4e}, {&(0x7f00000019c0)="f3b7a05e8e631e0b02fbd19067c2314a4f6d3827ca471fa229a03901e1555da2e3459d4a89db0cdcd0053056fc072e4a79b2305eae03e5f70ab05197c900e7e8a24eb60a01a6b0648530cb6fd6365067958376976a2b0109c440c07a2f772ab51873ab06d24e7b86fe58a01d0db35c53a83327db7446fa154b63a74fa7849d41dbaec4f36ddcb2b7fdbbbf10a29d4c55102a1864d83f2d78e92622a7baae7e837780b122ea565a5ddb70f7fbc493981fa1b4afb3300bf265cbeca3468bbd50ce318721ddbb738af456d926ab19c3", 0xce}, {&(0x7f0000001ac0)="534c9319eaff57a27612055b37d4ecbcb181feafc8d24c6194fd6a4390753f1595057ea13ce387", 0x27}, {&(0x7f0000001b00)="3c9607eca55fbcd0ce8a28794643d3db4d03db18951a29552a17e753bd5a649b94e67d590305426260d16956071a7283884135a7c5dbbadc56183e72ddd5a32eefae7b35bc9fba", 0x47}], 0x4, &(0x7f0000001bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0xca}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x10001}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x40}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0xf0}, 0x4000) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:01 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) ioctl$HIDIOCGREPORTINFO(r2, 0xc00c4809, &(0x7f0000001880)={0x2, 0x3, 0x4}) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:01 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) ioctl$HIDIOCGPHYS(r3, 0x80404812, &(0x7f0000001840)) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:01 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) openat$null(0xffffffffffffff9c, &(0x7f0000001800), 0x2802, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:01 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001600)={0x4, 0x5, 0x3, 0x1}) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:22 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:00:22 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000001580)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001500)="414acc81cfd69211844cc1f628825c130e9b420ead4d77f9607c2bd7114d044e469ec7a49552aa77753f628b83c568c04fa03c620db7bb8d898afce8d307116d0f466f53cbd1a305ace043778ab302bda823cb6431", 0x55, r2}, 0x68) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:22 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000c80)=""/58) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r7, 0x5328) 00:00:22 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) ioctl$HIDIOCINITREPORT(r11, 0x4805, 0x0) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x7) 00:00:22 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x50901132}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) 00:00:22 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7, 0xdc8, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x1, 0x7, 0x0, 0x6}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) pipe2$9p(&(0x7f0000000600), 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r5 = socket(0x1, 0x2, 0x200) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', r4, 0x10, 0x80, 0xb6, 0x1, {{0x35, 0x4, 0x2, 0x13, 0xd4, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@local, 0x5393cd27}]}, @end, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "c6b72b"}]}, @cipso={0x86, 0x6, 0x3}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0xf, "0bb4fd59a3c514919a54c4c542"}, {0x2, 0x9, "7baa19dd47edfb"}, {0x0, 0xf, "0bf17ba14f0de8e474788472d3"}, {0x5, 0x4, "4a1b"}, {0x0, 0x7, "4ae136b64c"}, {0x6, 0x3, "b3"}, {0x7, 0x12, "aaa384a434da346d3c51240c5da4ece0"}, {0x7, 0xe, "c4b898ec8abcf2853a2d9c07"}, {0x1, 0xb, "fa91d33d3a059aefb1"}]}, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x6, [0xff, 0x1ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x95, [@broadcast, @empty, @multicast1, @local, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x7, [{@empty, 0x4}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x810) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}}, 0x20004040) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c00)={0x1, 0xc1, 0x7, 0x54, 0xe, 0x3f}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:00:22 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/85, 0x55}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/49, 0x31}], 0x6, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/174, 0xae}, {&(0x7f0000001840)=""/18, 0x12}], 0x2, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/128, 0x80}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/193, 0xc1}], 0x7, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/211, 0xd3}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/12, 0xc}], 0x7, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x6, 0x12003, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000029c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002a00)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r13, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x2000004) recvmsg$unix(r6, &(0x7f0000003240)={&(0x7f0000002b80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/208, 0xd0}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/166, 0xa6}], 0x7, &(0x7f00000031c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40006110) recvmmsg$unix(r14, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/17, 0x11}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/100, 0x64}], 0x7, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x2082, &(0x7f0000005c40)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, &(0x7f0000005c80), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000005d80)={'syztnl1\x00', &(0x7f0000005d00)={'syztnl1\x00', r11, 0x29, 0x9, 0x7, 0x4, 0x2, @remote, @mcast1, 0x7800, 0x700, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e40)={&(0x7f0000005dc0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f00), r8) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000006000)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x54, r16, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x870}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000006040)={0x7, 0x3, 0x0, 0x6f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r13, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48800) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x1086a0}, 0xc, &(0x7f0000006280)={&(0x7f0000006200)={0x48, r17, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004825}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x14, r13, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008040}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000006500)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000064c0)={&(0x7f0000006480)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x10) 00:00:22 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r7, 0x5302) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000005600)={{0x3, 0x1, 0x2000, 0x2, 0x10000, 0xeb}, 0x166, [0x7a, 0x9, 0x4, 0x0, 0x1a1, 0x4, 0x400, 0x8001, 0x5, 0x80000001, 0x0, 0x1, 0x9, 0x100, 0xfff, 0x2, 0x1, 0x0, 0xffffffff, 0x10000000, 0xfffffffd, 0x7, 0x80000000, 0xff, 0xd07, 0x7f, 0x4, 0x0, 0x8, 0x7ff, 0x76cb, 0x9, 0x8, 0x8, 0x7, 0xa057, 0x800, 0x2, 0x2, 0x101, 0xfffffffd, 0x8, 0x59, 0x2, 0x90e, 0x8, 0x10001, 0xfff, 0x2, 0x7f, 0xba5f, 0x1f, 0x200, 0xfffffff9, 0xffffffff, 0x0, 0x6, 0x9, 0x25635741, 0x9, 0x40, 0x6, 0xff, 0x80000001, 0x985, 0x8000, 0x610, 0x7, 0x2, 0x7, 0x1f, 0xf0, 0x7fff, 0x6, 0x3, 0x1, 0x101, 0x2, 0x8000, 0x5, 0x80000001, 0x9, 0x7, 0x7, 0x8, 0x2, 0x8001, 0x9, 0x8, 0x1, 0x6ba2f68b, 0xbb, 0x100, 0x2, 0x4, 0x7, 0x10000, 0x10001, 0x7fffffff, 0x0, 0x0, 0x8, 0xfffffffd, 0x4d7c, 0x10000, 0xab84, 0x3ff, 0x80, 0x7, 0x8, 0x101, 0xaa8a, 0x4, 0x1f, 0x35a, 0x9fb, 0x3f, 0xffff, 0x7, 0x9, 0xf9, 0x63, 0x2, 0x6, 0x2, 0x0, 0x0, 0x20, 0x97, 0x7, 0x1, 0x1, 0x1, 0xfffffff7, 0x8, 0x2, 0x3ac, 0x8000, 0xc5f, 0x7, 0xd79, 0x4, 0x8000, 0x4, 0x1, 0x60b24573, 0x100, 0xffffffff, 0x6f, 0x4, 0x6, 0x6cbd0e15, 0x9, 0x5, 0x5, 0x5, 0x1, 0x72, 0x0, 0x21b, 0x200, 0x545, 0x0, 0x9, 0xfff, 0xffffffff, 0x2, 0xbd5a, 0x9, 0x9, 0x8, 0x280, 0x1, 0x7ff, 0x2, 0xfffff642, 0x4, 0xffffffff, 0x3, 0x4, 0x400, 0x1, 0x2, 0x0, 0x7, 0x4, 0x9, 0x1, 0x9, 0x6, 0x100, 0x20, 0x7f, 0x2f, 0x6, 0x2, 0x3, 0x6, 0xbffd, 0x9, 0x401, 0x5, 0xfff, 0x3, 0x9, 0x6, 0xfff, 0x4, 0x7, 0x57, 0x9, 0x7, 0x0, 0x8be3, 0x1f, 0x40000000, 0x100000, 0x4, 0xf5b, 0x5d, 0xffffffff, 0x3, 0xab, 0x8444, 0x0, 0x8000, 0xc3, 0x0, 0x0, 0xcae, 0x75c, 0x800, 0x5, 0x0, 0x1000, 0x1000, 0x5ee4, 0x7fff, 0xfffffffd, 0x9, 0x1, 0x2, 0x5, 0x3ff, 0x4, 0x3, 0x9, 0x9e, 0x0, 0x63, 0x0, 0x7, 0x2, 0x9c, 0x915a550, 0x10001, 0x6, 0xfffffffd, 0xfffffffc, 0x1, 0x8, 0x1, 0x9, 0x2, 0x401, 0x3f, 0x40000, 0x4, 0x7, 0x8b5, 0x6, 0x80000000, 0xfff, 0xffff, 0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0xfffff000, 0x0, 0x3, 0x1, 0x3, 0x4, 0xfffffff8, 0x1f, 0x9, 0x3, 0x5, 0x5, 0x6ac46459, 0x2, 0x9c, 0x980, 0x6, 0x8000, 0x68, 0xb4, 0x4, 0x10000, 0x5e, 0x9, 0x6c3, 0x6, 0x3ff, 0x3, 0x6, 0x1ff, 0x2, 0x9ebb, 0x4, 0x3c0d, 0x3, 0x6d4c, 0x0, 0x0, 0x5, 0x7931a51b, 0x9, 0x6, 0x7, 0x80000001, 0x6, 0xfffff255, 0x7f, 0x3, 0x2, 0x1, 0x4, 0xfffffbbe, 0x6, 0x9, 0x9e, 0x8, 0x3, 0xff, 0xa6, 0xffff, 0x18, 0x1000, 0x6, 0x0, 0x8, 0x1, 0xe0, 0x8000, 0x401, 0x0, 0x7f, 0x800, 0x7fffffff, 0x7, 0x1, 0x5, 0x8001, 0x9, 0x5, 0xf6000000, 0x8001, 0x2, 0x8001, 0x6, 0x7fffffff, 0x7f, 0x200, 0x7, 0x10000, 0x2, 0xfff, 0xfa9, 0xdb3, 0x1c, 0xfffffab2, 0x368f, 0x0, 0x80000000, 0x2, 0xffff0001, 0xd37, 0x9, 0x8, 0x80000000, 0x5, 0x5, 0x2, 0x80, 0x101, 0x9, 0x8, 0x6, 0x8, 0x4, 0xffffff01, 0x8, 0x101, 0x5, 0x7fffffff, 0xa0, 0x853, 0x2, 0x5, 0x9, 0x1, 0x4, 0x2c89, 0x100, 0x945, 0x5, 0x4, 0x15, 0x2, 0x0, 0x6, 0x5, 0x9, 0x8, 0x0, 0x80000001, 0x6, 0x4, 0x1f, 0xfff, 0x4, 0x7, 0xffffdff0, 0x80000001, 0xb06, 0x30b, 0x2, 0x5, 0x3f, 0x4, 0x6, 0x70, 0x2, 0x40d7, 0xfffffff9, 0x1, 0x7fc14d85, 0x8001, 0x20, 0x10000, 0x5, 0x1f, 0x0, 0x9, 0x0, 0xfffff000, 0x9a5c, 0x4, 0x9, 0x1ff, 0x509, 0x4, 0xff, 0x36, 0x8, 0x2, 0x9c6, 0x1, 0x1, 0xdd29, 0x1, 0x0, 0xfffffffa, 0x4, 0xfff, 0x1, 0x4c7, 0x9, 0x7, 0x80, 0x9, 0x5, 0x4, 0x5, 0x10000, 0xfa3, 0x7, 0x8, 0x6, 0xffffffff, 0xe1, 0x7, 0x3, 0x5, 0x7ff, 0x0, 0x9, 0x6, 0x2, 0x1093, 0x56ef, 0x6, 0x7ff, 0x1, 0x8, 0x9, 0x2, 0x6, 0x7ff, 0x400, 0x40, 0x20, 0x7f, 0x400, 0x9, 0x8001, 0xa00d, 0x50, 0x0, 0x1, 0x1fffc000, 0x100, 0x80000001, 0x40, 0xffffff5d, 0x101, 0x8001, 0x7fffffff, 0x20, 0x3, 0x3e, 0x92, 0x0, 0x7fffffff, 0x3, 0x1, 0x8, 0x1808, 0xf08, 0x4, 0xb25, 0x23, 0x1, 0x80, 0x40, 0x2, 0xfffffff9, 0xf999, 0x1, 0x7ff, 0x57d, 0x6, 0x3, 0x1, 0x0, 0xd44, 0x5, 0x1, 0x400, 0xb8, 0x2, 0x4, 0x0, 0x3, 0x4b1, 0x7, 0x4, 0xfffffffc, 0x9, 0x9, 0x7fffffff, 0x5, 0x9, 0x1, 0x8, 0x6, 0x0, 0x1, 0xa0, 0x261f025b, 0x0, 0x80000000, 0xffff7bd5, 0x8, 0x68c, 0x2b, 0x8, 0x4, 0x4, 0x0, 0x1, 0x8a19, 0x175, 0xe7e, 0x5b7a, 0x3, 0x20, 0x1400000, 0x1, 0x4, 0x40, 0x131d, 0x80000000, 0x200, 0x1, 0x8, 0x6, 0xe9a, 0xdb, 0xfffffff8, 0x0, 0x1f, 0x10000, 0x9, 0xffffffff, 0x5, 0x40, 0x383bcc9a, 0x3ff, 0x7fff, 0x2, 0x200, 0x105, 0x7, 0x401, 0x2, 0xffff, 0x1, 0x824, 0x0, 0x3f, 0x3, 0x1f, 0x9, 0x9, 0x8, 0x20, 0x400, 0x1, 0x0, 0xfffff800, 0x101, 0x7f, 0x98, 0x1000, 0x4, 0x2d, 0x3, 0x5, 0x3, 0xfffffffb, 0xfffffffb, 0x100, 0x5, 0x4, 0x7, 0x0, 0x0, 0x1, 0x5, 0x5, 0x4, 0x3, 0x4e, 0xba3a, 0x8, 0xa69c, 0x100, 0x0, 0x7, 0x2, 0x8, 0x2, 0x3, 0x6, 0x1, 0x7fffffff, 0x7, 0xafb2, 0x100, 0xc9ba, 0x1ff, 0x79e, 0x3, 0x9, 0x6, 0x9, 0x2, 0x9, 0x3, 0x0, 0x8, 0x10001, 0x9, 0x56e1, 0x5, 0x9, 0x3, 0x6, 0x51, 0x1000, 0x8, 0x5, 0x9c0, 0x8000, 0x8, 0x8, 0x6, 0x8001, 0x80000000, 0x10001, 0x0, 0xccf2, 0x5, 0x7f, 0x8000, 0x6, 0x3, 0x4b, 0x2, 0x2, 0x101, 0x9, 0x48000, 0x9, 0x101, 0x2, 0x5, 0xfffff800, 0x3, 0x5, 0x75a0, 0xe224, 0xbea8da52, 0x40000000, 0xcbc, 0xff, 0x1000, 0x7fff, 0x0, 0x4000, 0xbb, 0x9, 0x101, 0x20, 0x8, 0x5, 0x2, 0x7fffffff, 0xfffffffd, 0x6c, 0x200, 0x1, 0x4, 0x0, 0x9, 0x80, 0x7f, 0x0, 0x18000, 0xf4, 0x0, 0x1, 0xff, 0xfff, 0x9, 0x2, 0x9, 0x4, 0x8000, 0x8, 0x20, 0xfff, 0x3, 0x9, 0x420, 0x6, 0x6, 0x7fffffff, 0x3, 0x6, 0x5, 0x5, 0x2, 0x7, 0x1, 0x3, 0x3, 0x200, 0x1, 0x10001, 0x100, 0x7, 0x9, 0x7ff, 0xff, 0x9, 0x3b02fe00, 0x1f, 0x6, 0x7fff, 0x6833fb70, 0x4, 0x5, 0x9, 0x6, 0x4, 0x9, 0x800, 0x6, 0x6, 0x6, 0x7, 0x39f, 0xf8000, 0x8, 0x1ff, 0x1, 0x9, 0x6, 0x0, 0x0, 0x6, 0x2, 0x8, 0x1, 0x7, 0x70, 0x6, 0x5, 0x758, 0xfffffff9, 0xf8ec563f, 0x3ff, 0x4, 0x0, 0xfe, 0xfffffffb, 0x101, 0x4, 0x80, 0xc01c, 0x7fff, 0x9, 0x7fff, 0x8, 0x9, 0x100, 0x3800000, 0x200, 0xa8d, 0x6, 0x62d5, 0x6, 0xffffffe1, 0x6, 0x20c00000, 0x49e, 0x3, 0x8, 0x401, 0x40, 0x80000001, 0x8, 0x1, 0xffff0001, 0x7, 0x2, 0x7, 0x0, 0x0, 0x0, 0xf, 0xe136, 0x0, 0x3ff, 0x80000000, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5a5, 0xff, 0x7, 0x4, 0xc6f5, 0xffffffff, 0x5cd7, 0x10000, 0x401, 0xffff, 0x9, 0x0, 0x4c, 0x7, 0x6, 0x7, 0x0, 0x79f, 0x8, 0x6, 0xffffffff, 0x5, 0xe8, 0x4, 0x1, 0xbc6, 0x7c5, 0x4, 0x81, 0x2, 0xffffffe0, 0xffff, 0x3, 0x7, 0x1, 0x8, 0x400, 0xb4, 0x3, 0x80000000, 0x3, 0x4be, 0x7fffffff, 0x5, 0x1, 0x2bd7e0d9, 0x5, 0x1, 0xffffffff, 0xfffffff7, 0x83, 0x400, 0x9, 0x6280a1c7, 0x101, 0x6, 0x6, 0x1ff, 0xffffffff, 0x99, 0x100, 0x1, 0x7, 0x0, 0xff, 0x8, 0x3, 0x80000000, 0x7, 0x9, 0x80000000, 0x0, 0x7, 0x1, 0x100, 0xfffffffb, 0x9, 0x5, 0xa0, 0xccf, 0x6, 0x0, 0xfffffffc, 0xffffffff, 0x7c4, 0x3ed, 0xff, 0x569c, 0x2, 0x7a, 0x6e82, 0x6, 0x9, 0x1, 0x0, 0x80, 0x1, 0x4, 0x7, 0x1, 0x8, 0x81, 0x31c, 0x7, 0x2400000, 0x6, 0x9, 0x1, 0x81, 0x80, 0xff, 0x162df04c, 0x2, 0x1f37, 0x2, 0x7fffffff, 0x3ff, 0xec, 0x383b, 0x401, 0x6, 0x61, 0x8000, 0x2, 0x1a4, 0x3, 0x2, 0x8000, 0x7fffffff, 0x3, 0xe00000, 0x2, 0x0, 0x3, 0x7, 0x6, 0x40, 0x8d2, 0x3, 0xfffffffd, 0x2, 0x1, 0x3ff, 0x401, 0x7fffffff, 0x89, 0x0, 0x2c, 0xf1e]}) 00:00:22 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x50901132}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) 00:00:22 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) ioctl$HIDIOCINITREPORT(r11, 0x4805, 0x0) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x7) 00:00:22 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) r1 = socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x44, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004800) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:36 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000c80)=""/58) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r7, 0x5328) 00:00:36 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:00:36 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/85, 0x55}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/49, 0x31}], 0x6, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/174, 0xae}, {&(0x7f0000001840)=""/18, 0x12}], 0x2, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/128, 0x80}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/193, 0xc1}], 0x7, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/211, 0xd3}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/12, 0xc}], 0x7, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x6, 0x12003, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000029c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002a00)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r13, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x2000004) recvmsg$unix(r6, &(0x7f0000003240)={&(0x7f0000002b80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/208, 0xd0}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/166, 0xa6}], 0x7, &(0x7f00000031c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40006110) recvmmsg$unix(r14, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/17, 0x11}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/100, 0x64}], 0x7, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x2082, &(0x7f0000005c40)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, &(0x7f0000005c80), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000005d80)={'syztnl1\x00', &(0x7f0000005d00)={'syztnl1\x00', r11, 0x29, 0x9, 0x7, 0x4, 0x2, @remote, @mcast1, 0x7800, 0x700, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e40)={&(0x7f0000005dc0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f00), r8) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000006000)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x54, r16, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x870}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000006040)={0x7, 0x3, 0x0, 0x6f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r13, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48800) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x1086a0}, 0xc, &(0x7f0000006280)={&(0x7f0000006200)={0x48, r17, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004825}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x14, r13, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008040}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000006500)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000064c0)={&(0x7f0000006480)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x10) 00:00:36 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r7, 0x5302) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000005600)={{0x3, 0x1, 0x2000, 0x2, 0x10000, 0xeb}, 0x166, [0x7a, 0x9, 0x4, 0x0, 0x1a1, 0x4, 0x400, 0x8001, 0x5, 0x80000001, 0x0, 0x1, 0x9, 0x100, 0xfff, 0x2, 0x1, 0x0, 0xffffffff, 0x10000000, 0xfffffffd, 0x7, 0x80000000, 0xff, 0xd07, 0x7f, 0x4, 0x0, 0x8, 0x7ff, 0x76cb, 0x9, 0x8, 0x8, 0x7, 0xa057, 0x800, 0x2, 0x2, 0x101, 0xfffffffd, 0x8, 0x59, 0x2, 0x90e, 0x8, 0x10001, 0xfff, 0x2, 0x7f, 0xba5f, 0x1f, 0x200, 0xfffffff9, 0xffffffff, 0x0, 0x6, 0x9, 0x25635741, 0x9, 0x40, 0x6, 0xff, 0x80000001, 0x985, 0x8000, 0x610, 0x7, 0x2, 0x7, 0x1f, 0xf0, 0x7fff, 0x6, 0x3, 0x1, 0x101, 0x2, 0x8000, 0x5, 0x80000001, 0x9, 0x7, 0x7, 0x8, 0x2, 0x8001, 0x9, 0x8, 0x1, 0x6ba2f68b, 0xbb, 0x100, 0x2, 0x4, 0x7, 0x10000, 0x10001, 0x7fffffff, 0x0, 0x0, 0x8, 0xfffffffd, 0x4d7c, 0x10000, 0xab84, 0x3ff, 0x80, 0x7, 0x8, 0x101, 0xaa8a, 0x4, 0x1f, 0x35a, 0x9fb, 0x3f, 0xffff, 0x7, 0x9, 0xf9, 0x63, 0x2, 0x6, 0x2, 0x0, 0x0, 0x20, 0x97, 0x7, 0x1, 0x1, 0x1, 0xfffffff7, 0x8, 0x2, 0x3ac, 0x8000, 0xc5f, 0x7, 0xd79, 0x4, 0x8000, 0x4, 0x1, 0x60b24573, 0x100, 0xffffffff, 0x6f, 0x4, 0x6, 0x6cbd0e15, 0x9, 0x5, 0x5, 0x5, 0x1, 0x72, 0x0, 0x21b, 0x200, 0x545, 0x0, 0x9, 0xfff, 0xffffffff, 0x2, 0xbd5a, 0x9, 0x9, 0x8, 0x280, 0x1, 0x7ff, 0x2, 0xfffff642, 0x4, 0xffffffff, 0x3, 0x4, 0x400, 0x1, 0x2, 0x0, 0x7, 0x4, 0x9, 0x1, 0x9, 0x6, 0x100, 0x20, 0x7f, 0x2f, 0x6, 0x2, 0x3, 0x6, 0xbffd, 0x9, 0x401, 0x5, 0xfff, 0x3, 0x9, 0x6, 0xfff, 0x4, 0x7, 0x57, 0x9, 0x7, 0x0, 0x8be3, 0x1f, 0x40000000, 0x100000, 0x4, 0xf5b, 0x5d, 0xffffffff, 0x3, 0xab, 0x8444, 0x0, 0x8000, 0xc3, 0x0, 0x0, 0xcae, 0x75c, 0x800, 0x5, 0x0, 0x1000, 0x1000, 0x5ee4, 0x7fff, 0xfffffffd, 0x9, 0x1, 0x2, 0x5, 0x3ff, 0x4, 0x3, 0x9, 0x9e, 0x0, 0x63, 0x0, 0x7, 0x2, 0x9c, 0x915a550, 0x10001, 0x6, 0xfffffffd, 0xfffffffc, 0x1, 0x8, 0x1, 0x9, 0x2, 0x401, 0x3f, 0x40000, 0x4, 0x7, 0x8b5, 0x6, 0x80000000, 0xfff, 0xffff, 0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0xfffff000, 0x0, 0x3, 0x1, 0x3, 0x4, 0xfffffff8, 0x1f, 0x9, 0x3, 0x5, 0x5, 0x6ac46459, 0x2, 0x9c, 0x980, 0x6, 0x8000, 0x68, 0xb4, 0x4, 0x10000, 0x5e, 0x9, 0x6c3, 0x6, 0x3ff, 0x3, 0x6, 0x1ff, 0x2, 0x9ebb, 0x4, 0x3c0d, 0x3, 0x6d4c, 0x0, 0x0, 0x5, 0x7931a51b, 0x9, 0x6, 0x7, 0x80000001, 0x6, 0xfffff255, 0x7f, 0x3, 0x2, 0x1, 0x4, 0xfffffbbe, 0x6, 0x9, 0x9e, 0x8, 0x3, 0xff, 0xa6, 0xffff, 0x18, 0x1000, 0x6, 0x0, 0x8, 0x1, 0xe0, 0x8000, 0x401, 0x0, 0x7f, 0x800, 0x7fffffff, 0x7, 0x1, 0x5, 0x8001, 0x9, 0x5, 0xf6000000, 0x8001, 0x2, 0x8001, 0x6, 0x7fffffff, 0x7f, 0x200, 0x7, 0x10000, 0x2, 0xfff, 0xfa9, 0xdb3, 0x1c, 0xfffffab2, 0x368f, 0x0, 0x80000000, 0x2, 0xffff0001, 0xd37, 0x9, 0x8, 0x80000000, 0x5, 0x5, 0x2, 0x80, 0x101, 0x9, 0x8, 0x6, 0x8, 0x4, 0xffffff01, 0x8, 0x101, 0x5, 0x7fffffff, 0xa0, 0x853, 0x2, 0x5, 0x9, 0x1, 0x4, 0x2c89, 0x100, 0x945, 0x5, 0x4, 0x15, 0x2, 0x0, 0x6, 0x5, 0x9, 0x8, 0x0, 0x80000001, 0x6, 0x4, 0x1f, 0xfff, 0x4, 0x7, 0xffffdff0, 0x80000001, 0xb06, 0x30b, 0x2, 0x5, 0x3f, 0x4, 0x6, 0x70, 0x2, 0x40d7, 0xfffffff9, 0x1, 0x7fc14d85, 0x8001, 0x20, 0x10000, 0x5, 0x1f, 0x0, 0x9, 0x0, 0xfffff000, 0x9a5c, 0x4, 0x9, 0x1ff, 0x509, 0x4, 0xff, 0x36, 0x8, 0x2, 0x9c6, 0x1, 0x1, 0xdd29, 0x1, 0x0, 0xfffffffa, 0x4, 0xfff, 0x1, 0x4c7, 0x9, 0x7, 0x80, 0x9, 0x5, 0x4, 0x5, 0x10000, 0xfa3, 0x7, 0x8, 0x6, 0xffffffff, 0xe1, 0x7, 0x3, 0x5, 0x7ff, 0x0, 0x9, 0x6, 0x2, 0x1093, 0x56ef, 0x6, 0x7ff, 0x1, 0x8, 0x9, 0x2, 0x6, 0x7ff, 0x400, 0x40, 0x20, 0x7f, 0x400, 0x9, 0x8001, 0xa00d, 0x50, 0x0, 0x1, 0x1fffc000, 0x100, 0x80000001, 0x40, 0xffffff5d, 0x101, 0x8001, 0x7fffffff, 0x20, 0x3, 0x3e, 0x92, 0x0, 0x7fffffff, 0x3, 0x1, 0x8, 0x1808, 0xf08, 0x4, 0xb25, 0x23, 0x1, 0x80, 0x40, 0x2, 0xfffffff9, 0xf999, 0x1, 0x7ff, 0x57d, 0x6, 0x3, 0x1, 0x0, 0xd44, 0x5, 0x1, 0x400, 0xb8, 0x2, 0x4, 0x0, 0x3, 0x4b1, 0x7, 0x4, 0xfffffffc, 0x9, 0x9, 0x7fffffff, 0x5, 0x9, 0x1, 0x8, 0x6, 0x0, 0x1, 0xa0, 0x261f025b, 0x0, 0x80000000, 0xffff7bd5, 0x8, 0x68c, 0x2b, 0x8, 0x4, 0x4, 0x0, 0x1, 0x8a19, 0x175, 0xe7e, 0x5b7a, 0x3, 0x20, 0x1400000, 0x1, 0x4, 0x40, 0x131d, 0x80000000, 0x200, 0x1, 0x8, 0x6, 0xe9a, 0xdb, 0xfffffff8, 0x0, 0x1f, 0x10000, 0x9, 0xffffffff, 0x5, 0x40, 0x383bcc9a, 0x3ff, 0x7fff, 0x2, 0x200, 0x105, 0x7, 0x401, 0x2, 0xffff, 0x1, 0x824, 0x0, 0x3f, 0x3, 0x1f, 0x9, 0x9, 0x8, 0x20, 0x400, 0x1, 0x0, 0xfffff800, 0x101, 0x7f, 0x98, 0x1000, 0x4, 0x2d, 0x3, 0x5, 0x3, 0xfffffffb, 0xfffffffb, 0x100, 0x5, 0x4, 0x7, 0x0, 0x0, 0x1, 0x5, 0x5, 0x4, 0x3, 0x4e, 0xba3a, 0x8, 0xa69c, 0x100, 0x0, 0x7, 0x2, 0x8, 0x2, 0x3, 0x6, 0x1, 0x7fffffff, 0x7, 0xafb2, 0x100, 0xc9ba, 0x1ff, 0x79e, 0x3, 0x9, 0x6, 0x9, 0x2, 0x9, 0x3, 0x0, 0x8, 0x10001, 0x9, 0x56e1, 0x5, 0x9, 0x3, 0x6, 0x51, 0x1000, 0x8, 0x5, 0x9c0, 0x8000, 0x8, 0x8, 0x6, 0x8001, 0x80000000, 0x10001, 0x0, 0xccf2, 0x5, 0x7f, 0x8000, 0x6, 0x3, 0x4b, 0x2, 0x2, 0x101, 0x9, 0x48000, 0x9, 0x101, 0x2, 0x5, 0xfffff800, 0x3, 0x5, 0x75a0, 0xe224, 0xbea8da52, 0x40000000, 0xcbc, 0xff, 0x1000, 0x7fff, 0x0, 0x4000, 0xbb, 0x9, 0x101, 0x20, 0x8, 0x5, 0x2, 0x7fffffff, 0xfffffffd, 0x6c, 0x200, 0x1, 0x4, 0x0, 0x9, 0x80, 0x7f, 0x0, 0x18000, 0xf4, 0x0, 0x1, 0xff, 0xfff, 0x9, 0x2, 0x9, 0x4, 0x8000, 0x8, 0x20, 0xfff, 0x3, 0x9, 0x420, 0x6, 0x6, 0x7fffffff, 0x3, 0x6, 0x5, 0x5, 0x2, 0x7, 0x1, 0x3, 0x3, 0x200, 0x1, 0x10001, 0x100, 0x7, 0x9, 0x7ff, 0xff, 0x9, 0x3b02fe00, 0x1f, 0x6, 0x7fff, 0x6833fb70, 0x4, 0x5, 0x9, 0x6, 0x4, 0x9, 0x800, 0x6, 0x6, 0x6, 0x7, 0x39f, 0xf8000, 0x8, 0x1ff, 0x1, 0x9, 0x6, 0x0, 0x0, 0x6, 0x2, 0x8, 0x1, 0x7, 0x70, 0x6, 0x5, 0x758, 0xfffffff9, 0xf8ec563f, 0x3ff, 0x4, 0x0, 0xfe, 0xfffffffb, 0x101, 0x4, 0x80, 0xc01c, 0x7fff, 0x9, 0x7fff, 0x8, 0x9, 0x100, 0x3800000, 0x200, 0xa8d, 0x6, 0x62d5, 0x6, 0xffffffe1, 0x6, 0x20c00000, 0x49e, 0x3, 0x8, 0x401, 0x40, 0x80000001, 0x8, 0x1, 0xffff0001, 0x7, 0x2, 0x7, 0x0, 0x0, 0x0, 0xf, 0xe136, 0x0, 0x3ff, 0x80000000, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5a5, 0xff, 0x7, 0x4, 0xc6f5, 0xffffffff, 0x5cd7, 0x10000, 0x401, 0xffff, 0x9, 0x0, 0x4c, 0x7, 0x6, 0x7, 0x0, 0x79f, 0x8, 0x6, 0xffffffff, 0x5, 0xe8, 0x4, 0x1, 0xbc6, 0x7c5, 0x4, 0x81, 0x2, 0xffffffe0, 0xffff, 0x3, 0x7, 0x1, 0x8, 0x400, 0xb4, 0x3, 0x80000000, 0x3, 0x4be, 0x7fffffff, 0x5, 0x1, 0x2bd7e0d9, 0x5, 0x1, 0xffffffff, 0xfffffff7, 0x83, 0x400, 0x9, 0x6280a1c7, 0x101, 0x6, 0x6, 0x1ff, 0xffffffff, 0x99, 0x100, 0x1, 0x7, 0x0, 0xff, 0x8, 0x3, 0x80000000, 0x7, 0x9, 0x80000000, 0x0, 0x7, 0x1, 0x100, 0xfffffffb, 0x9, 0x5, 0xa0, 0xccf, 0x6, 0x0, 0xfffffffc, 0xffffffff, 0x7c4, 0x3ed, 0xff, 0x569c, 0x2, 0x7a, 0x6e82, 0x6, 0x9, 0x1, 0x0, 0x80, 0x1, 0x4, 0x7, 0x1, 0x8, 0x81, 0x31c, 0x7, 0x2400000, 0x6, 0x9, 0x1, 0x81, 0x80, 0xff, 0x162df04c, 0x2, 0x1f37, 0x2, 0x7fffffff, 0x3ff, 0xec, 0x383b, 0x401, 0x6, 0x61, 0x8000, 0x2, 0x1a4, 0x3, 0x2, 0x8000, 0x7fffffff, 0x3, 0xe00000, 0x2, 0x0, 0x3, 0x7, 0x6, 0x40, 0x8d2, 0x3, 0xfffffffd, 0x2, 0x1, 0x3ff, 0x401, 0x7fffffff, 0x89, 0x0, 0x2c, 0xf1e]}) 00:00:36 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) ioctl$HIDIOCINITREPORT(r11, 0x4805, 0x0) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x7) 00:00:36 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7, 0xdc8, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x1, 0x7, 0x0, 0x6}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) pipe2$9p(&(0x7f0000000600), 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r5 = socket(0x1, 0x2, 0x200) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', r4, 0x10, 0x80, 0xb6, 0x1, {{0x35, 0x4, 0x2, 0x13, 0xd4, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@local, 0x5393cd27}]}, @end, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "c6b72b"}]}, @cipso={0x86, 0x6, 0x3}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0xf, "0bb4fd59a3c514919a54c4c542"}, {0x2, 0x9, "7baa19dd47edfb"}, {0x0, 0xf, "0bf17ba14f0de8e474788472d3"}, {0x5, 0x4, "4a1b"}, {0x0, 0x7, "4ae136b64c"}, {0x6, 0x3, "b3"}, {0x7, 0x12, "aaa384a434da346d3c51240c5da4ece0"}, {0x7, 0xe, "c4b898ec8abcf2853a2d9c07"}, {0x1, 0xb, "fa91d33d3a059aefb1"}]}, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x6, [0xff, 0x1ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x95, [@broadcast, @empty, @multicast1, @local, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x7, [{@empty, 0x4}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x810) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}}, 0x20004040) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c00)={0x1, 0xc1, 0x7, 0x54, 0xe, 0x3f}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:00:36 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) sendmsg$sock(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001240)="077aafe6fb49f5474d94", 0xa}, {&(0x7f0000001280)="21cc8891", 0x4}], 0x2, &(0x7f0000001300)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}], 0x60}, 0x40041) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:36 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) r9 = openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x50901132}, 0xc, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x814) 00:00:36 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:00:49 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) ioctl$HIDIOCINITREPORT(r11, 0x4805, 0x0) 00:00:49 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7, 0xdc8, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x1, 0x7, 0x0, 0x6}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) pipe2$9p(&(0x7f0000000600), 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r5 = socket(0x1, 0x2, 0x200) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', r4, 0x10, 0x80, 0xb6, 0x1, {{0x35, 0x4, 0x2, 0x13, 0xd4, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@local, 0x5393cd27}]}, @end, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "c6b72b"}]}, @cipso={0x86, 0x6, 0x3}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0xf, "0bb4fd59a3c514919a54c4c542"}, {0x2, 0x9, "7baa19dd47edfb"}, {0x0, 0xf, "0bf17ba14f0de8e474788472d3"}, {0x5, 0x4, "4a1b"}, {0x0, 0x7, "4ae136b64c"}, {0x6, 0x3, "b3"}, {0x7, 0x12, "aaa384a434da346d3c51240c5da4ece0"}, {0x7, 0xe, "c4b898ec8abcf2853a2d9c07"}, {0x1, 0xb, "fa91d33d3a059aefb1"}]}, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x6, [0xff, 0x1ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x95, [@broadcast, @empty, @multicast1, @local, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x7, [{@empty, 0x4}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x810) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}}, 0x20004040) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c00)={0x1, 0xc1, 0x7, 0x54, 0xe, 0x3f}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)) ioctl$NS_GET_NSTYPE(0xffffffffffffffff, 0xb703, 0x0) 00:00:49 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/85, 0x55}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/49, 0x31}], 0x6, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/174, 0xae}, {&(0x7f0000001840)=""/18, 0x12}], 0x2, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/128, 0x80}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/193, 0xc1}], 0x7, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/211, 0xd3}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/12, 0xc}], 0x7, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x6, 0x12003, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000029c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002a00)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r13, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x2000004) recvmsg$unix(r6, &(0x7f0000003240)={&(0x7f0000002b80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/208, 0xd0}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/166, 0xa6}], 0x7, &(0x7f00000031c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40006110) recvmmsg$unix(r14, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/17, 0x11}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/100, 0x64}], 0x7, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x2082, &(0x7f0000005c40)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, &(0x7f0000005c80), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000005d80)={'syztnl1\x00', &(0x7f0000005d00)={'syztnl1\x00', r11, 0x29, 0x9, 0x7, 0x4, 0x2, @remote, @mcast1, 0x7800, 0x700, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e40)={&(0x7f0000005dc0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f00), r8) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000006000)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x54, r16, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x870}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000006040)={0x7, 0x3, 0x0, 0x6f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r13, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48800) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x1086a0}, 0xc, &(0x7f0000006280)={&(0x7f0000006200)={0x48, r17, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004825}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x14, r13, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008040}, 0x4) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000006500)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000064c0)={&(0x7f0000006480)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x10) 00:00:49 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:00:49 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:00:49 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r7, 0x5302) ioctl$HIDIOCSUSAGES(r6, 0x501c4814, &(0x7f0000005600)={{0x3, 0x1, 0x2000, 0x2, 0x10000, 0xeb}, 0x166, [0x7a, 0x9, 0x4, 0x0, 0x1a1, 0x4, 0x400, 0x8001, 0x5, 0x80000001, 0x0, 0x1, 0x9, 0x100, 0xfff, 0x2, 0x1, 0x0, 0xffffffff, 0x10000000, 0xfffffffd, 0x7, 0x80000000, 0xff, 0xd07, 0x7f, 0x4, 0x0, 0x8, 0x7ff, 0x76cb, 0x9, 0x8, 0x8, 0x7, 0xa057, 0x800, 0x2, 0x2, 0x101, 0xfffffffd, 0x8, 0x59, 0x2, 0x90e, 0x8, 0x10001, 0xfff, 0x2, 0x7f, 0xba5f, 0x1f, 0x200, 0xfffffff9, 0xffffffff, 0x0, 0x6, 0x9, 0x25635741, 0x9, 0x40, 0x6, 0xff, 0x80000001, 0x985, 0x8000, 0x610, 0x7, 0x2, 0x7, 0x1f, 0xf0, 0x7fff, 0x6, 0x3, 0x1, 0x101, 0x2, 0x8000, 0x5, 0x80000001, 0x9, 0x7, 0x7, 0x8, 0x2, 0x8001, 0x9, 0x8, 0x1, 0x6ba2f68b, 0xbb, 0x100, 0x2, 0x4, 0x7, 0x10000, 0x10001, 0x7fffffff, 0x0, 0x0, 0x8, 0xfffffffd, 0x4d7c, 0x10000, 0xab84, 0x3ff, 0x80, 0x7, 0x8, 0x101, 0xaa8a, 0x4, 0x1f, 0x35a, 0x9fb, 0x3f, 0xffff, 0x7, 0x9, 0xf9, 0x63, 0x2, 0x6, 0x2, 0x0, 0x0, 0x20, 0x97, 0x7, 0x1, 0x1, 0x1, 0xfffffff7, 0x8, 0x2, 0x3ac, 0x8000, 0xc5f, 0x7, 0xd79, 0x4, 0x8000, 0x4, 0x1, 0x60b24573, 0x100, 0xffffffff, 0x6f, 0x4, 0x6, 0x6cbd0e15, 0x9, 0x5, 0x5, 0x5, 0x1, 0x72, 0x0, 0x21b, 0x200, 0x545, 0x0, 0x9, 0xfff, 0xffffffff, 0x2, 0xbd5a, 0x9, 0x9, 0x8, 0x280, 0x1, 0x7ff, 0x2, 0xfffff642, 0x4, 0xffffffff, 0x3, 0x4, 0x400, 0x1, 0x2, 0x0, 0x7, 0x4, 0x9, 0x1, 0x9, 0x6, 0x100, 0x20, 0x7f, 0x2f, 0x6, 0x2, 0x3, 0x6, 0xbffd, 0x9, 0x401, 0x5, 0xfff, 0x3, 0x9, 0x6, 0xfff, 0x4, 0x7, 0x57, 0x9, 0x7, 0x0, 0x8be3, 0x1f, 0x40000000, 0x100000, 0x4, 0xf5b, 0x5d, 0xffffffff, 0x3, 0xab, 0x8444, 0x0, 0x8000, 0xc3, 0x0, 0x0, 0xcae, 0x75c, 0x800, 0x5, 0x0, 0x1000, 0x1000, 0x5ee4, 0x7fff, 0xfffffffd, 0x9, 0x1, 0x2, 0x5, 0x3ff, 0x4, 0x3, 0x9, 0x9e, 0x0, 0x63, 0x0, 0x7, 0x2, 0x9c, 0x915a550, 0x10001, 0x6, 0xfffffffd, 0xfffffffc, 0x1, 0x8, 0x1, 0x9, 0x2, 0x401, 0x3f, 0x40000, 0x4, 0x7, 0x8b5, 0x6, 0x80000000, 0xfff, 0xffff, 0x8, 0xfffffffc, 0x1, 0x1, 0x1, 0xfffff000, 0x0, 0x3, 0x1, 0x3, 0x4, 0xfffffff8, 0x1f, 0x9, 0x3, 0x5, 0x5, 0x6ac46459, 0x2, 0x9c, 0x980, 0x6, 0x8000, 0x68, 0xb4, 0x4, 0x10000, 0x5e, 0x9, 0x6c3, 0x6, 0x3ff, 0x3, 0x6, 0x1ff, 0x2, 0x9ebb, 0x4, 0x3c0d, 0x3, 0x6d4c, 0x0, 0x0, 0x5, 0x7931a51b, 0x9, 0x6, 0x7, 0x80000001, 0x6, 0xfffff255, 0x7f, 0x3, 0x2, 0x1, 0x4, 0xfffffbbe, 0x6, 0x9, 0x9e, 0x8, 0x3, 0xff, 0xa6, 0xffff, 0x18, 0x1000, 0x6, 0x0, 0x8, 0x1, 0xe0, 0x8000, 0x401, 0x0, 0x7f, 0x800, 0x7fffffff, 0x7, 0x1, 0x5, 0x8001, 0x9, 0x5, 0xf6000000, 0x8001, 0x2, 0x8001, 0x6, 0x7fffffff, 0x7f, 0x200, 0x7, 0x10000, 0x2, 0xfff, 0xfa9, 0xdb3, 0x1c, 0xfffffab2, 0x368f, 0x0, 0x80000000, 0x2, 0xffff0001, 0xd37, 0x9, 0x8, 0x80000000, 0x5, 0x5, 0x2, 0x80, 0x101, 0x9, 0x8, 0x6, 0x8, 0x4, 0xffffff01, 0x8, 0x101, 0x5, 0x7fffffff, 0xa0, 0x853, 0x2, 0x5, 0x9, 0x1, 0x4, 0x2c89, 0x100, 0x945, 0x5, 0x4, 0x15, 0x2, 0x0, 0x6, 0x5, 0x9, 0x8, 0x0, 0x80000001, 0x6, 0x4, 0x1f, 0xfff, 0x4, 0x7, 0xffffdff0, 0x80000001, 0xb06, 0x30b, 0x2, 0x5, 0x3f, 0x4, 0x6, 0x70, 0x2, 0x40d7, 0xfffffff9, 0x1, 0x7fc14d85, 0x8001, 0x20, 0x10000, 0x5, 0x1f, 0x0, 0x9, 0x0, 0xfffff000, 0x9a5c, 0x4, 0x9, 0x1ff, 0x509, 0x4, 0xff, 0x36, 0x8, 0x2, 0x9c6, 0x1, 0x1, 0xdd29, 0x1, 0x0, 0xfffffffa, 0x4, 0xfff, 0x1, 0x4c7, 0x9, 0x7, 0x80, 0x9, 0x5, 0x4, 0x5, 0x10000, 0xfa3, 0x7, 0x8, 0x6, 0xffffffff, 0xe1, 0x7, 0x3, 0x5, 0x7ff, 0x0, 0x9, 0x6, 0x2, 0x1093, 0x56ef, 0x6, 0x7ff, 0x1, 0x8, 0x9, 0x2, 0x6, 0x7ff, 0x400, 0x40, 0x20, 0x7f, 0x400, 0x9, 0x8001, 0xa00d, 0x50, 0x0, 0x1, 0x1fffc000, 0x100, 0x80000001, 0x40, 0xffffff5d, 0x101, 0x8001, 0x7fffffff, 0x20, 0x3, 0x3e, 0x92, 0x0, 0x7fffffff, 0x3, 0x1, 0x8, 0x1808, 0xf08, 0x4, 0xb25, 0x23, 0x1, 0x80, 0x40, 0x2, 0xfffffff9, 0xf999, 0x1, 0x7ff, 0x57d, 0x6, 0x3, 0x1, 0x0, 0xd44, 0x5, 0x1, 0x400, 0xb8, 0x2, 0x4, 0x0, 0x3, 0x4b1, 0x7, 0x4, 0xfffffffc, 0x9, 0x9, 0x7fffffff, 0x5, 0x9, 0x1, 0x8, 0x6, 0x0, 0x1, 0xa0, 0x261f025b, 0x0, 0x80000000, 0xffff7bd5, 0x8, 0x68c, 0x2b, 0x8, 0x4, 0x4, 0x0, 0x1, 0x8a19, 0x175, 0xe7e, 0x5b7a, 0x3, 0x20, 0x1400000, 0x1, 0x4, 0x40, 0x131d, 0x80000000, 0x200, 0x1, 0x8, 0x6, 0xe9a, 0xdb, 0xfffffff8, 0x0, 0x1f, 0x10000, 0x9, 0xffffffff, 0x5, 0x40, 0x383bcc9a, 0x3ff, 0x7fff, 0x2, 0x200, 0x105, 0x7, 0x401, 0x2, 0xffff, 0x1, 0x824, 0x0, 0x3f, 0x3, 0x1f, 0x9, 0x9, 0x8, 0x20, 0x400, 0x1, 0x0, 0xfffff800, 0x101, 0x7f, 0x98, 0x1000, 0x4, 0x2d, 0x3, 0x5, 0x3, 0xfffffffb, 0xfffffffb, 0x100, 0x5, 0x4, 0x7, 0x0, 0x0, 0x1, 0x5, 0x5, 0x4, 0x3, 0x4e, 0xba3a, 0x8, 0xa69c, 0x100, 0x0, 0x7, 0x2, 0x8, 0x2, 0x3, 0x6, 0x1, 0x7fffffff, 0x7, 0xafb2, 0x100, 0xc9ba, 0x1ff, 0x79e, 0x3, 0x9, 0x6, 0x9, 0x2, 0x9, 0x3, 0x0, 0x8, 0x10001, 0x9, 0x56e1, 0x5, 0x9, 0x3, 0x6, 0x51, 0x1000, 0x8, 0x5, 0x9c0, 0x8000, 0x8, 0x8, 0x6, 0x8001, 0x80000000, 0x10001, 0x0, 0xccf2, 0x5, 0x7f, 0x8000, 0x6, 0x3, 0x4b, 0x2, 0x2, 0x101, 0x9, 0x48000, 0x9, 0x101, 0x2, 0x5, 0xfffff800, 0x3, 0x5, 0x75a0, 0xe224, 0xbea8da52, 0x40000000, 0xcbc, 0xff, 0x1000, 0x7fff, 0x0, 0x4000, 0xbb, 0x9, 0x101, 0x20, 0x8, 0x5, 0x2, 0x7fffffff, 0xfffffffd, 0x6c, 0x200, 0x1, 0x4, 0x0, 0x9, 0x80, 0x7f, 0x0, 0x18000, 0xf4, 0x0, 0x1, 0xff, 0xfff, 0x9, 0x2, 0x9, 0x4, 0x8000, 0x8, 0x20, 0xfff, 0x3, 0x9, 0x420, 0x6, 0x6, 0x7fffffff, 0x3, 0x6, 0x5, 0x5, 0x2, 0x7, 0x1, 0x3, 0x3, 0x200, 0x1, 0x10001, 0x100, 0x7, 0x9, 0x7ff, 0xff, 0x9, 0x3b02fe00, 0x1f, 0x6, 0x7fff, 0x6833fb70, 0x4, 0x5, 0x9, 0x6, 0x4, 0x9, 0x800, 0x6, 0x6, 0x6, 0x7, 0x39f, 0xf8000, 0x8, 0x1ff, 0x1, 0x9, 0x6, 0x0, 0x0, 0x6, 0x2, 0x8, 0x1, 0x7, 0x70, 0x6, 0x5, 0x758, 0xfffffff9, 0xf8ec563f, 0x3ff, 0x4, 0x0, 0xfe, 0xfffffffb, 0x101, 0x4, 0x80, 0xc01c, 0x7fff, 0x9, 0x7fff, 0x8, 0x9, 0x100, 0x3800000, 0x200, 0xa8d, 0x6, 0x62d5, 0x6, 0xffffffe1, 0x6, 0x20c00000, 0x49e, 0x3, 0x8, 0x401, 0x40, 0x80000001, 0x8, 0x1, 0xffff0001, 0x7, 0x2, 0x7, 0x0, 0x0, 0x0, 0xf, 0xe136, 0x0, 0x3ff, 0x80000000, 0x8, 0x3ff, 0x4, 0x3, 0x2, 0x5a5, 0xff, 0x7, 0x4, 0xc6f5, 0xffffffff, 0x5cd7, 0x10000, 0x401, 0xffff, 0x9, 0x0, 0x4c, 0x7, 0x6, 0x7, 0x0, 0x79f, 0x8, 0x6, 0xffffffff, 0x5, 0xe8, 0x4, 0x1, 0xbc6, 0x7c5, 0x4, 0x81, 0x2, 0xffffffe0, 0xffff, 0x3, 0x7, 0x1, 0x8, 0x400, 0xb4, 0x3, 0x80000000, 0x3, 0x4be, 0x7fffffff, 0x5, 0x1, 0x2bd7e0d9, 0x5, 0x1, 0xffffffff, 0xfffffff7, 0x83, 0x400, 0x9, 0x6280a1c7, 0x101, 0x6, 0x6, 0x1ff, 0xffffffff, 0x99, 0x100, 0x1, 0x7, 0x0, 0xff, 0x8, 0x3, 0x80000000, 0x7, 0x9, 0x80000000, 0x0, 0x7, 0x1, 0x100, 0xfffffffb, 0x9, 0x5, 0xa0, 0xccf, 0x6, 0x0, 0xfffffffc, 0xffffffff, 0x7c4, 0x3ed, 0xff, 0x569c, 0x2, 0x7a, 0x6e82, 0x6, 0x9, 0x1, 0x0, 0x80, 0x1, 0x4, 0x7, 0x1, 0x8, 0x81, 0x31c, 0x7, 0x2400000, 0x6, 0x9, 0x1, 0x81, 0x80, 0xff, 0x162df04c, 0x2, 0x1f37, 0x2, 0x7fffffff, 0x3ff, 0xec, 0x383b, 0x401, 0x6, 0x61, 0x8000, 0x2, 0x1a4, 0x3, 0x2, 0x8000, 0x7fffffff, 0x3, 0xe00000, 0x2, 0x0, 0x3, 0x7, 0x6, 0x40, 0x8d2, 0x3, 0xfffffffd, 0x2, 0x1, 0x3ff, 0x401, 0x7fffffff, 0x89, 0x0, 0x2c, 0xf1e]}) 00:00:49 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) openat$full(0xffffffffffffff9c, &(0x7f0000001200), 0x30043, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:00:49 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000c80)=""/58) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) ioctl$CDROM_CHANGER_NSLOTS(r7, 0x5328) 00:00:49 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r10, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x3c, r9, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000090) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:00:49 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:00:49 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:00:49 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) openat$full(0xffffffffffffff9c, &(0x7f0000000a00), 0x10000, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:00:49 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000002cc0)={&(0x7f0000002bc0), 0xc, &(0x7f0000002c80)={&(0x7f0000002c40)={0x28, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xaf}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}]}, 0x28}, 0x1, 0x0, 0x0, 0x8a0}, 0x80) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:00:49 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:00:49 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r8) sendmsg$ETHTOOL_MSG_RINGS_SET(r7, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r9, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x1ff}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}]}, 0x54}}, 0x40000) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:00:49 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f00000011c0)={0x5, 0x4, 0x8001, 0x7ff}) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:01:04 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000001180)={0x3, 0xffffffff, 0x8, 0x3ff, 0x5, 0x2b2}) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:01:04 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), r7) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:04 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r6, 0x5302) 00:01:04 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) sysfs$2(0x2, 0x1, &(0x7f0000000c80)=""/58) openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) 00:01:04 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:01:04 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) syz_genetlink_get_family_id$batadv(&(0x7f0000002c00), r0) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:01:04 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/85, 0x55}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/49, 0x31}], 0x6, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/174, 0xae}, {&(0x7f0000001840)=""/18, 0x12}], 0x2, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/128, 0x80}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/193, 0xc1}], 0x7, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/211, 0xd3}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/12, 0xc}], 0x7, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x6, 0x12003, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000029c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002a00)={'batadv0\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r13, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x2000004) recvmsg$unix(r6, &(0x7f0000003240)={&(0x7f0000002b80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/208, 0xd0}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/166, 0xa6}], 0x7, &(0x7f00000031c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40006110) recvmmsg$unix(r14, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/17, 0x11}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/100, 0x64}], 0x7, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x2082, &(0x7f0000005c40)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, &(0x7f0000005c80), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000005d80)={'syztnl1\x00', &(0x7f0000005d00)={'syztnl1\x00', r11, 0x29, 0x9, 0x7, 0x4, 0x2, @remote, @mcast1, 0x7800, 0x700, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e40)={&(0x7f0000005dc0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x10) r16 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f00), r8) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000006000)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x54, r16, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x870}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000006040)={0x7, 0x3, 0x0, 0x6f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r13, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48800) r17 = syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x1086a0}, 0xc, &(0x7f0000006280)={&(0x7f0000006200)={0x48, r17, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r15}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004825}, 0x20000000) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f00000063c0)={&(0x7f0000006300)={0x10, 0x0, 0x0, 0x1002}, 0xc, &(0x7f0000006380)={&(0x7f0000006340)={0x14, r13, 0x2, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40008040}, 0x4) 00:01:04 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7, 0xdc8, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x1, 0x7, 0x0, 0x6}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) pipe2$9p(&(0x7f0000000600), 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r5 = socket(0x1, 0x2, 0x200) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', r4, 0x10, 0x80, 0xb6, 0x1, {{0x35, 0x4, 0x2, 0x13, 0xd4, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@local, 0x5393cd27}]}, @end, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "c6b72b"}]}, @cipso={0x86, 0x6, 0x3}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0xf, "0bb4fd59a3c514919a54c4c542"}, {0x2, 0x9, "7baa19dd47edfb"}, {0x0, 0xf, "0bf17ba14f0de8e474788472d3"}, {0x5, 0x4, "4a1b"}, {0x0, 0x7, "4ae136b64c"}, {0x6, 0x3, "b3"}, {0x7, 0x12, "aaa384a434da346d3c51240c5da4ece0"}, {0x7, 0xe, "c4b898ec8abcf2853a2d9c07"}, {0x1, 0xb, "fa91d33d3a059aefb1"}]}, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x6, [0xff, 0x1ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x95, [@broadcast, @empty, @multicast1, @local, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x7, [{@empty, 0x4}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x810) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}}, 0x20004040) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c00)={0x1, 0xc1, 0x7, 0x54, 0xe, 0x3f}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d80)) 00:01:04 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, 0x0, 0x8, 0x70bd27, 0x4, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1f2391b9510b"}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x44840) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:04 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x44010081}, 0xc, &(0x7f0000002b40)={&(0x7f0000002b00)={0x24, r7, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}]}, 0x24}}, 0x4001) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:01:04 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:01:04 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) recvmmsg$unix(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)=""/207, 0xcf}], 0x1, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}], 0x1, 0x40010000, &(0x7f0000000740)={r4, r5+10000000}) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:05 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) syz_genetlink_get_family_id$batadv(&(0x7f0000002ac0), r6) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:01:05 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) socket(0x6, 0x3, 0x1f) ioctl$HIDIOCGCOLLECTIONINFO(r0, 0xc0104811, &(0x7f0000001140)={0xffff, 0x80000001, 0x6b1, 0x4}) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:01:05 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) clock_gettime(0x0, &(0x7f0000000700)) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:05 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c40), 0x4800, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) 00:01:05 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) syz_io_uring_setup(0x353f, &(0x7f0000000640)={0x0, 0x871b, 0x8, 0x1, 0x1c1, 0x0, r6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:01:05 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r6, 0x5302) [ 182.677784] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 182.678427] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.678930] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.679564] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 182.680319] Call Trace: [ 182.680552] [ 182.680790] __schedule+0x893/0x2470 [ 182.681172] ? io_schedule_timeout+0x150/0x150 [ 182.681583] ? do_raw_spin_lock+0x121/0x260 [ 182.682022] ? rwlock_bug.part.0+0x90/0x90 [ 182.682327] schedule+0xda/0x1b0 [ 182.682571] rescuer_thread+0x851/0xdb0 [ 182.682927] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.683332] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.683689] ? lockdep_hardirqs_on+0x79/0x100 [ 182.684099] ? worker_thread+0x1260/0x1260 [ 182.684423] kthread+0x2ed/0x3a0 [ 182.684933] ? kthread_complete_and_exit+0x40/0x40 [ 182.685944] ret_from_fork+0x22/0x30 [ 182.686341] [ 182.686904] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 182.687385] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.687775] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.688269] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 182.688833] Call Trace: [ 182.689008] [ 182.689169] __schedule+0x893/0x2470 [ 182.689480] ? io_schedule_timeout+0x150/0x150 [ 182.689866] ? do_raw_spin_lock+0x121/0x260 [ 182.690210] ? rwlock_bug.part.0+0x90/0x90 [ 182.690541] schedule+0xda/0x1b0 [ 182.690817] rescuer_thread+0x851/0xdb0 [ 182.691124] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.691496] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.691893] ? lockdep_hardirqs_on+0x79/0x100 [ 182.692236] ? worker_thread+0x1260/0x1260 [ 182.692559] kthread+0x2ed/0x3a0 [ 182.692842] ? kthread_complete_and_exit+0x40/0x40 [ 182.693213] ret_from_fork+0x22/0x30 [ 182.693518] [ 182.693702] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 182.694208] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.694601] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.695200] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 182.695844] Call Trace: [ 182.696041] [ 182.696213] __schedule+0x893/0x2470 [ 182.696514] ? io_schedule_timeout+0x150/0x150 [ 182.696886] ? do_raw_spin_lock+0x121/0x260 [ 182.697227] ? rwlock_bug.part.0+0x90/0x90 [ 182.697577] schedule+0xda/0x1b0 [ 182.697867] rescuer_thread+0x851/0xdb0 [ 182.698180] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.698570] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.698963] ? lockdep_hardirqs_on+0x79/0x100 [ 182.699322] ? worker_thread+0x1260/0x1260 [ 182.699646] kthread+0x2ed/0x3a0 [ 182.699924] ? kthread_complete_and_exit+0x40/0x40 [ 182.700310] ret_from_fork+0x22/0x30 [ 182.700608] [ 182.700810] INFO: task netns:6 blocked for more than 143 seconds. [ 182.701257] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.701652] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.702256] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 182.702897] Call Trace: [ 182.703098] [ 182.703285] __schedule+0x893/0x2470 [ 182.703584] ? io_schedule_timeout+0x150/0x150 [ 182.703956] ? do_raw_spin_lock+0x121/0x260 [ 182.704296] ? rwlock_bug.part.0+0x90/0x90 [ 182.704633] schedule+0xda/0x1b0 [ 182.704922] rescuer_thread+0x851/0xdb0 [ 182.705237] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.705632] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.706040] ? lockdep_hardirqs_on+0x79/0x100 [ 182.706391] ? worker_thread+0x1260/0x1260 [ 182.706721] kthread+0x2ed/0x3a0 [ 182.707009] ? kthread_complete_and_exit+0x40/0x40 [ 182.707395] ret_from_fork+0x22/0x30 [ 182.707699] [ 182.707901] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 182.708401] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.708819] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.709385] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 182.710047] Workqueue: 0x0 (ata_sff) [ 182.710350] Call Trace: [ 182.710544] [ 182.710721] __schedule+0x893/0x2470 [ 182.711039] ? io_schedule_timeout+0x150/0x150 [ 182.711393] schedule+0xda/0x1b0 [ 182.711668] worker_thread+0x15f/0x1260 [ 182.712008] ? process_one_work+0x16a0/0x16a0 [ 182.712360] kthread+0x2ed/0x3a0 [ 182.712627] ? kthread_complete_and_exit+0x40/0x40 [ 182.713027] ret_from_fork+0x22/0x30 [ 182.713340] [ 182.713536] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 182.714062] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.714463] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.715054] task:kworker/0:0H state:I stack:28952 pid:8 ppid:2 flags:0x00004000 [ 182.715702] Workqueue: 0x0 (kblockd) [ 182.716026] Call Trace: [ 182.716238] [ 182.716419] __schedule+0x893/0x2470 [ 182.716709] ? io_schedule_timeout+0x150/0x150 [ 182.717086] schedule+0xda/0x1b0 [ 182.717353] worker_thread+0x15f/0x1260 [ 182.717689] ? process_one_work+0x16a0/0x16a0 [ 182.718057] kthread+0x2ed/0x3a0 [ 182.718328] ? kthread_complete_and_exit+0x40/0x40 [ 182.718711] ret_from_fork+0x22/0x30 [ 182.719042] [ 182.719228] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 182.719752] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.720164] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.720760] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 182.721384] Call Trace: [ 182.721585] [ 182.721785] __schedule+0x893/0x2470 [ 182.722086] ? io_schedule_timeout+0x150/0x150 [ 182.722430] ? do_raw_spin_lock+0x121/0x260 [ 182.722780] ? rwlock_bug.part.0+0x90/0x90 [ 182.723110] schedule+0xda/0x1b0 [ 182.723381] rescuer_thread+0x851/0xdb0 [ 182.723701] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.724115] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.724511] ? lockdep_hardirqs_on+0x79/0x100 [ 182.724880] ? worker_thread+0x1260/0x1260 [ 182.725209] kthread+0x2ed/0x3a0 [ 182.725492] ? kthread_complete_and_exit+0x40/0x40 [ 182.725890] ret_from_fork+0x22/0x30 [ 182.726203] [ 182.726388] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 182.726936] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.727326] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.727911] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 182.728516] Call Trace: [ 182.728710] [ 182.728907] __schedule+0x893/0x2470 [ 182.729209] ? io_schedule_timeout+0x150/0x150 [ 182.729568] ? mark_held_locks+0x9e/0xe0 [ 182.729906] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.730309] schedule+0xda/0x1b0 [ 182.730580] rcu_tasks_one_gp+0x3db/0xc10 [ 182.730944] rcu_tasks_kthread+0x80/0xa0 [ 182.731261] ? rcu_tasks_postscan+0x10/0x10 [ 182.731599] kthread+0x2ed/0x3a0 [ 182.731892] ? kthread_complete_and_exit+0x40/0x40 [ 182.732257] ret_from_fork+0x22/0x30 [ 182.732565] [ 182.732770] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 182.733278] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.733689] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.734261] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 182.734888] Workqueue: 0x0 (events_highpri) [ 182.735216] Call Trace: [ 182.735409] [ 182.735589] __schedule+0x893/0x2470 [ 182.735911] ? io_schedule_timeout+0x150/0x150 [ 182.736289] schedule+0xda/0x1b0 [ 182.736560] worker_thread+0x15f/0x1260 [ 182.736902] ? process_one_work+0x16a0/0x16a0 [ 182.737253] kthread+0x2ed/0x3a0 [ 182.737523] ? kthread_complete_and_exit+0x40/0x40 [ 182.737937] ret_from_fork+0x22/0x30 [ 182.738241] [ 182.738424] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 182.738943] Not tainted 6.0.0-rc7-next-20220930 #1 [ 182.739355] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 182.739935] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 182.740560] Call Trace: [ 182.740776] [ 182.740957] __schedule+0x893/0x2470 [ 182.741257] ? io_schedule_timeout+0x150/0x150 [ 182.741619] ? do_raw_spin_lock+0x121/0x260 [ 182.741968] ? rwlock_bug.part.0+0x90/0x90 [ 182.742299] schedule+0xda/0x1b0 [ 182.742564] rescuer_thread+0x851/0xdb0 [ 182.742894] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.743275] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 182.743667] ? lockdep_hardirqs_on+0x79/0x100 [ 182.744047] ? worker_thread+0x1260/0x1260 [ 182.744361] kthread+0x2ed/0x3a0 [ 182.744615] ? kthread_complete_and_exit+0x40/0x40 [ 182.745000] ret_from_fork+0x22/0x30 [ 182.745302] [ 182.745532] [ 182.745532] Showing all locks held in the system: [ 182.746000] 1 lock held by rcu_tasks_kthre/11: [ 182.746329] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 182.747058] 1 lock held by khungtaskd/25: [ 182.747358] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 182.748039] 1 lock held by systemd-journal/112: [ 182.748375] 1 lock held by in:imklog/188: [ 182.748691] #0: ffff88800dba8fe8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 182.749340] 2 locks held by syz-executor/4305: [ 182.749690] [ 182.749846] ============================================= [ 182.749846] [ 183.702051] Bluetooth: hci2: command 0x0406 tx timeout [ 183.703045] Bluetooth: hci7: command 0x0406 tx timeout [ 183.703961] Bluetooth: hci6: command 0x0406 tx timeout [ 183.704843] Bluetooth: hci1: command 0x0406 tx timeout [ 183.705704] Bluetooth: hci0: command 0x0406 tx timeout [ 183.706574] Bluetooth: hci4: command 0x0406 tx timeout [ 183.707459] Bluetooth: hci3: command 0x0406 tx timeout 00:01:16 executing program 1: sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xce}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000844) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x80000000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2885bef4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9e}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x40}]}, 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x24000850) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c014}, 0x845) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xc4004078}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004020}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4004000) recvmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/177, 0xb1}, {&(0x7f0000000680)=""/94, 0x5e}, {&(0x7f0000000700)=""/149, 0x95}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/20, 0x14}, {&(0x7f0000000880)=""/91, 0x5b}], 0x6, &(0x7f0000000980)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x4001}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) syz_genetlink_get_family_id$batadv(&(0x7f0000000b00), r5) ioctl$CDROMSTOP(r4, 0x5307) ioctl$CDROMREADTOCENTRY(r4, 0x5306, &(0x7f0000000b40)={0x5, 0x8, 0x7, 0x3, @msf={0x0, 0x1, 0x40}, 0x1}) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000b80), 0x600240, 0x0) ioctl$CDROMREADTOCENTRY(r6, 0x5306, &(0x7f0000000bc0)={0x0, 0x0, 0x7, 0x2, @lba=0x401, 0x10}) ioctl$CDROM_LOCKDOOR(r3, 0x5329, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000c00), r1) openat$null(0xffffffffffffff9c, &(0x7f0000000cc0), 0x14c0, 0x0) 00:01:16 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:01:16 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:01:16 executing program 0: ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f0000000000)={0x3, 0xffffffff, 0x80000000}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x46000, 0x0) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f0000000080)={0x3, 0x1, 0xed9, 0x9, 0x9, 0x1ff}) ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x100000001) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f00000000c0)={0x1, 0x2, 0x1ff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x20, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x22}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24008040}, 0x800) r2 = syz_open_dev$hiddev(&(0x7f0000000300), 0x3, 0x10000) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000340)={0x3, 0x3, 0x101, 0x7, 0xecc, 0xffffff7f}) ioctl$CDROMSETSPINDOWN(0xffffffffffffffff, 0x531e, &(0x7f0000000380)=0x6) sched_yield() r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000003c0), 0x204001, 0x0) ioctl$CDROM_DISC_STATUS(r3, 0x5327) recvmmsg$unix(r0, &(0x7f00000051c0)=[{{&(0x7f0000000400), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000500)=""/40, 0x28}, {&(0x7f0000000540)=""/33, 0x21}, {&(0x7f0000000580)=""/146, 0x92}], 0x4, &(0x7f0000000680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000006c0), 0x6e, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/252, 0xfc}, {&(0x7f0000000840)=""/142, 0x8e}, {&(0x7f0000000900)=""/113, 0x71}, {&(0x7f0000000980)=""/243, 0xf3}], 0x4}}, {{&(0x7f0000000ac0)=@abs, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/234, 0xea}, {&(0x7f0000000c40)=""/151, 0x97}], 0x2, &(0x7f0000000d40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000dc0)=@abs, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000000e40)=""/255, 0xff}, {&(0x7f0000000f40)=""/128, 0x80}, {&(0x7f0000000fc0)=""/206, 0xce}, {&(0x7f00000010c0)=""/98, 0x62}, {&(0x7f0000001140)=""/142, 0x8e}, {&(0x7f0000001200)=""/191, 0xbf}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/198, 0xc6}], 0x8, &(0x7f0000001540)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001600), 0x6e, &(0x7f0000002b00)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/200, 0xc8}, {&(0x7f0000001840)=""/109, 0x6d}, {&(0x7f00000018c0)=""/4096, 0x1000}, {&(0x7f00000028c0)=""/122, 0x7a}, {&(0x7f0000002940)=""/243, 0xf3}, {&(0x7f0000002a40)=""/145, 0x91}], 0x7, &(0x7f0000002b80)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003d40)=@abs, 0x6e, &(0x7f0000005040)=[{&(0x7f0000003dc0)=""/191, 0xbf}, {&(0x7f0000003e80)=""/4096, 0x1000}, {&(0x7f0000004e80)=""/140, 0x8c}, {&(0x7f0000004f40)=""/34, 0x22}, {&(0x7f0000004f80)=""/3, 0x3}, {&(0x7f0000004fc0)=""/124, 0x7c}], 0x6, &(0x7f00000050c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}}], 0x7, 0x41, &(0x7f0000005380)) ioctl$HIDIOCINITREPORT(r5, 0x4805, 0x0) ioctl$HIDIOCINITREPORT(r4, 0x4805, 0x0) timer_create(0x5, &(0x7f0000005540)={0x0, 0x32, 0x1, @thr={&(0x7f00000053c0)="7742b4373ca312d22021289457f33502225683752d4768e84ff1bdf16d5578b0673405f2fd5a6cc4d6a194c1ac34aefda552278f86de1e30182c98135f65df8fb0e0f82a85b2fee02feb2d049d82ae8bb3af28e2a091c08a0192836503ea", &(0x7f0000005440)="3efe7c326cc02079f1005c409af4e0021161b70ace67669cd1b1e5a69830ca92fb47c6a9cbde7964ddcb5d260eefe3e833e908d97868d70b33203ff772549ceae76e6608b224703d23445a2a99d21227155818062e1df996d3a2f602e05c1fb5637cab3125b8de7518f76f1871e65ebd49a13b9ea2b4b6e2743e2899fe9bc54b36321f18aed22f9dad0cef70a7025684759440ad4cddd26dda7d2d0a99e425177c51e1492a69b472e9f8de984c74fc6217ff28bf156ae80e778e6cf9b73b851807c9be491608c525de335b2a0a3aed5b33063e337e6564"}}, &(0x7f0000005580)) r6 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000055c0), 0x100001, 0x0) ioctl$CDROMRESUME(r6, 0x5302) 00:01:16 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) r3 = accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) accept$unix(r3, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:16 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r1) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r1) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20008001) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1040}, 0x15) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x7, 0xdc8, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2, 0x1, 0x7, 0x0, 0x6}}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x4c, r2, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) pipe2$9p(&(0x7f0000000600), 0x4000) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r3, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x51}, 0x20000000) r5 = socket(0x1, 0x2, 0x200) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000980)={'ip_vti0\x00', &(0x7f0000000880)={'gretap0\x00', r4, 0x10, 0x80, 0xb6, 0x1, {{0x35, 0x4, 0x2, 0x13, 0xd4, 0x66, 0x0, 0x80, 0x4, 0x0, @multicast1, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0xc, 0x64, 0x1, 0x8, [{@local, 0x5393cd27}]}, @end, @cipso={0x86, 0xb, 0x1, [{0x1, 0x5, "c6b72b"}]}, @cipso={0x86, 0x6, 0x3}, @end, @cipso={0x86, 0x66, 0xffffffffffffffff, [{0x1, 0xf, "0bb4fd59a3c514919a54c4c542"}, {0x2, 0x9, "7baa19dd47edfb"}, {0x0, 0xf, "0bf17ba14f0de8e474788472d3"}, {0x5, 0x4, "4a1b"}, {0x0, 0x7, "4ae136b64c"}, {0x6, 0x3, "b3"}, {0x7, 0x12, "aaa384a434da346d3c51240c5da4ece0"}, {0x7, 0xe, "c4b898ec8abcf2853a2d9c07"}, {0x1, 0xb, "fa91d33d3a059aefb1"}]}, @timestamp={0x44, 0x10, 0x9c, 0x0, 0x6, [0xff, 0x1ff, 0x5]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1b, 0x95, [@broadcast, @empty, @multicast1, @local, @rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0xc, 0xee, 0x3, 0x7, [{@empty, 0x4}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x50, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x4041}, 0x810) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x400}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x3c}}, 0x20004040) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c00)={0x1, 0xc1, 0x7, 0x54, 0xe, 0x3f}, 0xc) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x54, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'virt_wifi0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 00:01:16 executing program 6: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/184, 0xb8}, {&(0x7f0000000140)=""/85, 0x55}], 0x2, &(0x7f0000000200)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/44, 0x2c}, {&(0x7f0000001380)=""/103, 0x67}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/137, 0x89}, {&(0x7f0000001580)=""/49, 0x31}], 0x6, &(0x7f0000001640)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}}, {{&(0x7f0000001700)=@abs, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001780)=""/174, 0xae}, {&(0x7f0000001840)=""/18, 0x12}], 0x2, &(0x7f00000018c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000001900)=@abs, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000001980)=""/2, 0x2}, {&(0x7f00000019c0)=""/128, 0x80}], 0x2, &(0x7f0000001a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000001b40), 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000001bc0)=""/90, 0x5a}, {&(0x7f0000001c40)=""/141, 0x8d}, {&(0x7f0000001d00)=""/83, 0x53}, {&(0x7f0000001d80)=""/106, 0x6a}, {&(0x7f0000001e00)=""/74, 0x4a}, {&(0x7f0000001e80)=""/61, 0x3d}, {&(0x7f0000001ec0)=""/193, 0xc1}], 0x7, &(0x7f0000002040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x140}}, {{&(0x7f0000002180), 0x6e, &(0x7f0000002740)=[{&(0x7f0000002200)=""/240, 0xf0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/222, 0xde}, {&(0x7f0000002500)=""/36, 0x24}, {&(0x7f0000002540)=""/211, 0xd3}, {&(0x7f0000002640)=""/146, 0x92}, {&(0x7f0000002700)=""/12, 0xc}], 0x7, &(0x7f00000027c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x6, 0x12003, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000029c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000002a00)={'batadv0\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002a80), r6) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000002b40)={&(0x7f0000002a40), 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x2c, r12, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x2000004) recvmsg$unix(r5, &(0x7f0000003240)={&(0x7f0000002b80), 0x6e, &(0x7f0000003140)=[{&(0x7f0000002c00)=""/112, 0x70}, {&(0x7f0000002c80)=""/208, 0xd0}, {&(0x7f0000002d80)=""/150, 0x96}, {&(0x7f0000002e40)=""/205, 0xcd}, {&(0x7f0000002f40)=""/211, 0xd3}, {&(0x7f0000003040)=""/10, 0xa}, {&(0x7f0000003080)=""/166, 0xa6}], 0x7, &(0x7f00000031c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}, 0x40006110) recvmmsg$unix(r13, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003280)=""/194, 0xc2}, {&(0x7f0000003380)=""/173, 0xad}, {&(0x7f0000003440)=""/91, 0x5b}, {&(0x7f00000034c0)=""/158, 0x9e}, {&(0x7f0000003580)=""/17, 0x11}, {&(0x7f00000035c0)=""/51, 0x33}, {&(0x7f0000003600)=""/100, 0x64}], 0x7, &(0x7f0000003700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x100}}, {{0x0, 0x0, &(0x7f0000005a80)=[{&(0x7f0000003800)=""/4096, 0x1000}, {&(0x7f0000004800)=""/23, 0x17}, {&(0x7f0000004840)=""/46, 0x2e}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/4096, 0x1000}], 0x6, &(0x7f0000005b00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x88}}], 0x2, 0x2082, &(0x7f0000005c40)={0x0, 0x3938700}) openat$tun(0xffffffffffffff9c, &(0x7f0000005c80), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000005d80)={'syztnl1\x00', &(0x7f0000005d00)={'syztnl1\x00', r10, 0x29, 0x9, 0x7, 0x4, 0x2, @remote, @mcast1, 0x7800, 0x700, 0x0, 0x4}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000005e80)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005e40)={&(0x7f0000005dc0)={0x68, 0x0, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x50}, 0x10) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005f00), r7) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000006000)={&(0x7f0000005ec0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000005fc0)={&(0x7f0000005f40)={0x54, r15, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xae}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xec}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x870}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x4) ioctl$CDROMVOLCTRL(r1, 0x530a, &(0x7f0000006040)={0x7, 0x3, 0x0, 0x6f}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000006140)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000006100)={&(0x7f00000060c0)={0x34, r12, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8e9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x48800) r16 = syz_genetlink_get_family_id$batadv(&(0x7f00000061c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000062c0)={&(0x7f0000006180)={0x10, 0x0, 0x0, 0x1086a0}, 0xc, &(0x7f0000006280)={&(0x7f0000006200)={0x48, r16, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r14}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004825}, 0x20000000) 00:01:16 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) socket(0x6, 0x3, 0x1f) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) 00:01:16 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) accept$unix(r1, &(0x7f0000000380)=@abs, &(0x7f0000000400)=0x6e) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:16 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100010c1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x400}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4008891) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:16 executing program 7: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000002400), 0x2040, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r1 = syz_io_uring_setup(0x4899, &(0x7f0000002540)={0x0, 0x4c74, 0x20, 0x0, 0x2bb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000025c0)=0x0, &(0x7f0000002600)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000002740)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd_index=0x7, 0x20, &(0x7f0000002700)=[{&(0x7f0000002640)="c30d963a3b430f9ca203b330fefda539b5b7fe19f31c0d80ca22fdd73102fd689adc7dd4cf3912fbb3ec60926a28159399a04911b483efc1cd3014c23e5948d7214e656261fb412a912479604456a32b049b52cd7a2318b5ee28cfc264a417f50de015df354125f1163134aa29bd78f13a507e55eab40ecf291a270fadc30549eeea7ea6e637f0950ef27e08aa7962b1d31f679f1370d3ec12a5dbefe9", 0x9d}], 0x1, 0x4, 0x1, {0x2, r3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, r3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xd, 0x4000010, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000002780)={0x1, 0x1, 0x80}) syz_io_uring_setup(0xf65, &(0x7f00000027c0)={0x0, 0x6e9a, 0x18, 0x2, 0x33}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002840)=0x0, &(0x7f0000002880)) syz_memcpy_off$IO_URING_METADATA_FLAGS(r4, 0x114, &(0x7f00000028c0), 0x0, 0x4) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002940), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000002a00)={&(0x7f0000002900), 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x3c, r5, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fffffff}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000002a40), 0x800, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x20010, r6, 0x10000000) openat$null(0xffffffffffffff9c, &(0x7f0000002d00), 0x36342, 0x0) 00:01:16 executing program 4: syz_io_uring_setup(0x3a2c, &(0x7f0000000000)={0x0, 0x8b98, 0x20, 0x0, 0x311}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_FALLOCATE={0x11, 0x4, 0x0, @fd_index=0x1, 0x5, 0x0, 0x6fc, 0x0, 0x1}, 0x401) syz_open_dev$hiddev(&(0x7f0000000140), 0x101, 0x2000) r1 = syz_io_uring_setup(0x5f9c, &(0x7f0000000180)={0x0, 0x408f, 0x24, 0x0, 0x3ac}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_io_uring_setup(0x401, &(0x7f0000000280)={0x0, 0xcc01, 0x10, 0x2, 0x6a, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000300), &(0x7f0000000340)) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000380)=0x400, 0x10001, 0x3) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x4a000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x2000000, 0x2010, r3, 0x0) r4 = shmget(0x0, 0x4000, 0x800, &(0x7f0000ff9000/0x4000)=nil) shmat(r4, &(0x7f0000ffb000/0x3000)=nil, 0x4000) sendmsg$inet6(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="cc0d0a4d41151f14e7413b80020b50008722e9db1e091eb36df72d4794c0c61d4164b35268b98c56af2c84d9a63c7f23b250c1396ecfac97d9", 0x39}, {&(0x7f0000000440)="e78d21ec4b8695eb08c20242bb2a5a188be2a822d23e1947485bff328e4eb9cb9e5345eee2a86069cecbf64510a07adb0dbe1ae52bc570b1b3cf37bd30e562668a463d47a0b9a2bbdfb4ab679e660f549deaab0739b13c8eb028606226172227cd4f9f3a37b3baf9eacb379488a73698fe09a47a6fa73e352e8ecce58599d54e1bcbc605c8321cdd5993", 0x8a}], 0x2}, 0x4004004) bind$bt_l2cap(r3, &(0x7f0000000580)={0x1f, 0x3, @any, 0x0, 0x2}, 0xe) r5 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x101040, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1800009, 0x30, r5, 0x10000000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000740), 0x141000, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x7ada) io_uring_setup(0x55e7, &(0x7f0000000780)={0x0, 0x13a2, 0x2, 0x3, 0x335}) 00:01:16 executing program 5: ioctl$HIDIOCAPPLICATION(0xffffffffffffffff, 0x4802, 0x4) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x2) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x8000, @none, 0x800}, 0xe) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x84, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x84}, 0x1, 0x0, 0x0, 0x8071}, 0x84) openat$full(0xffffffffffffff9c, &(0x7f0000000b40), 0x468a7789cb463891, 0x0) 00:01:16 executing program 3: r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0xffff, 0x648100) ioctl$HIDIOCGREPORT(r0, 0x400c4807, &(0x7f0000000040)={0x1, 0x3, 0x6}) ioctl$HIDIOCGPHYS(r0, 0x80404812, &(0x7f0000000080)) ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f00000000c0)={{0x1, 0x100, 0x5, 0x73e, 0x800, 0x100}, 0x26a, [0x7fffffff, 0x291, 0x8, 0x6, 0x6, 0xc88, 0x0, 0x9, 0x8, 0x7, 0x0, 0x80000001, 0x1f, 0x1f26, 0x637, 0x6, 0x7, 0x2, 0xfffff001, 0x1, 0x8, 0x5, 0x0, 0x400, 0x3, 0x3, 0x1, 0x80000000, 0x3, 0x3f, 0x6, 0x9, 0x5, 0x1, 0x8, 0x401, 0x0, 0x3, 0xffff, 0xfffffff8, 0xffff, 0x6, 0x81, 0x8, 0x400, 0x8, 0xdcfc, 0x81, 0x2, 0x7, 0x3f, 0x3, 0xfff, 0x8, 0x10001, 0xe386, 0x20, 0x0, 0x7ff, 0xa4e0, 0x40, 0xfffffffd, 0x1ff, 0x9, 0x0, 0x2, 0x4, 0xa1e, 0x5, 0x3, 0x1ff, 0x0, 0x40, 0x1b9, 0x8, 0x4, 0x421, 0x2, 0x7, 0x2b6b, 0x1, 0x7, 0x8, 0x8, 0xb7, 0x5, 0x2, 0x8776, 0x7, 0x7fffffff, 0x5, 0x77, 0x96, 0xd23, 0x7, 0x6bc9, 0x9, 0x0, 0x400, 0x1f, 0x401, 0x7fff, 0x3d1, 0x9, 0x0, 0x6, 0x80, 0xfff, 0x800, 0x4, 0x9, 0x3, 0xfffffffa, 0x5, 0x5b4, 0x4, 0x1, 0x2, 0x4a1, 0x3f, 0xef4, 0x5, 0x2000000, 0x7, 0x5, 0x3d4bb931, 0xfff, 0x3f, 0x5, 0x1, 0x8, 0xfff, 0x7fff, 0x1, 0x7fff, 0xdf0, 0x0, 0x3, 0x8, 0xfff, 0x10000, 0xfffffffb, 0x4, 0x7, 0x8, 0x1, 0xffffffc0, 0x5, 0x0, 0x8, 0xfffffffa, 0x400, 0x9, 0x4, 0xfff, 0x5, 0x8d9f, 0x70, 0x9, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x80, 0x400, 0x7fff, 0x8, 0xcc2, 0x9, 0xfffffff8, 0x9, 0x3, 0x1, 0x8000, 0x7, 0x9, 0x5b2b, 0x6, 0x4e1b18d4, 0x4, 0x7, 0xffff, 0x8, 0x3ff, 0x2, 0x8, 0x7f, 0x3, 0xfffffffa, 0x101, 0x8, 0x1, 0x400, 0x7fff, 0x4, 0x9, 0x1000, 0x1, 0xfffffffb, 0x6eb8, 0x9, 0xff, 0xb9, 0xfffff000, 0x9, 0x5, 0x8, 0x401, 0x7, 0xdde, 0x9, 0x95, 0xffffffff, 0x4, 0x5, 0x7, 0xfff, 0x1, 0x7, 0x6, 0x44360eca, 0x0, 0x2, 0x4, 0x222c, 0x3, 0xfffff801, 0x3f, 0x3, 0x4, 0x7fff, 0x1, 0x728, 0x7fff, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x1f, 0x7, 0x4, 0xffff01eb, 0x20, 0xb53c, 0x4, 0x3ff, 0x40, 0x0, 0x8ae, 0x1, 0x81, 0x34, 0x1ff, 0x6, 0x3, 0x7f, 0xa1410047, 0xfff, 0xfffffc01, 0x8, 0x1, 0x6, 0x7fffffff, 0x0, 0x2, 0x0, 0x1, 0x5, 0x24c00000, 0x0, 0x8, 0x6, 0x4, 0x4, 0x18000000, 0x2, 0x6e2, 0x9c4, 0x0, 0xc42, 0x4, 0x8, 0x1, 0x7fff, 0x3ff, 0x1ff, 0x6, 0x8001, 0x7, 0x3, 0x0, 0xfffff000, 0x0, 0x4998000, 0x4, 0x1, 0x20, 0x6, 0x10000, 0x9, 0x80000000, 0x80000001, 0x8, 0x9, 0x5, 0xffffa606, 0x5, 0x800, 0x1, 0x81, 0x1, 0x1f, 0x0, 0x7, 0x9, 0x2, 0x200, 0xffffffff, 0xff, 0x9, 0xff, 0x4, 0x5, 0x80000001, 0x1, 0x1000, 0x9, 0x3eca, 0xdfd0, 0x1f, 0x1f, 0x6, 0xff, 0x8, 0x1, 0x7, 0x8, 0x2, 0xfffffcfc, 0x6, 0xfffffffe, 0x6, 0x2, 0x8000, 0x800, 0x3, 0x1, 0x7, 0x99d0, 0x1, 0x1802, 0x741, 0x9, 0x401, 0xffff, 0xafc, 0x1, 0xffff, 0x400, 0x192, 0x4, 0x80000000, 0x3, 0x6, 0x4f6e0b63, 0x80000000, 0xfff, 0x20, 0x4, 0x80, 0x56, 0xffffffff, 0x9, 0x3, 0x9, 0x100, 0x3f, 0x10001, 0x8, 0x9, 0x9, 0x0, 0x5, 0x4, 0x2d5, 0xac5, 0x3f, 0xfffffffa, 0x2, 0x0, 0xfffffffd, 0x81, 0x1000, 0x6, 0x400, 0xffff8000, 0x1ff, 0x6, 0xd3e, 0x3d7, 0x42, 0x5, 0x4, 0x2c, 0x0, 0x4, 0x3, 0x1f, 0x80000001, 0x1, 0x100, 0x5, 0x3a3, 0x400, 0x5, 0x7, 0x4, 0x6, 0x99ec, 0x6, 0x9, 0x7, 0x7, 0x1, 0x9, 0xfff, 0x6, 0x6, 0x1ff, 0x0, 0x1, 0x10000, 0x6, 0x38, 0x3, 0x10000, 0xfe, 0x0, 0x8, 0x2, 0x200, 0x2, 0x80, 0x7d9, 0x1, 0x3ff, 0x35c4, 0x0, 0x3, 0x0, 0x8, 0x7fffffff, 0x8, 0x8000, 0x6, 0xe11, 0xff, 0x5, 0x9, 0x3, 0x27, 0x4, 0x8, 0x2, 0x5, 0x80000001, 0x7, 0x3f, 0x8001, 0x9, 0x4663fe73, 0x0, 0x78, 0x6, 0x10000, 0x7ff, 0x2, 0x7f, 0xfffffff7, 0x9, 0x6, 0xffff0001, 0x2, 0x4, 0x0, 0x626ad014, 0x2, 0x4, 0x8, 0x8, 0x3, 0x4b, 0x400, 0x7fff, 0xb7, 0xffffffff, 0x6, 0x3, 0x80000000, 0xac, 0x9, 0x0, 0x42, 0xff, 0x1, 0x81, 0x1, 0x5, 0x0, 0x564, 0x0, 0x2d7f, 0xe7f, 0x4, 0x8, 0x7, 0x3, 0x1, 0x8001, 0x8000, 0x1b, 0x0, 0x1f324678, 0x1, 0x1, 0x7, 0x3, 0x7625, 0x2, 0xffff, 0x7, 0x91, 0x4, 0xffffff8a, 0x100, 0x8, 0x0, 0x5b8b, 0x8000, 0x0, 0x6, 0x4, 0xff, 0x5, 0x5, 0x20, 0x80000001, 0x7, 0x2, 0x6, 0x63, 0x6, 0x80000001, 0x9, 0xab, 0x8, 0x1ff, 0x7, 0x0, 0x3, 0x88e, 0x10000, 0x9df, 0x282, 0xfff, 0xffffffff, 0x100, 0x8, 0xfff, 0x3, 0x8, 0x6, 0x6036, 0x35, 0x10001, 0x1000, 0x9, 0x3, 0x80000000, 0x0, 0x1, 0x4, 0x3b33, 0xffff8000, 0x7ff, 0x9, 0x1, 0x800, 0xffff, 0x800, 0x1, 0x9, 0x7, 0x1, 0x80000001, 0x1, 0xf2, 0x4e01, 0x3f, 0xff, 0xffffffff, 0x8000, 0x5, 0xffffffff, 0x4, 0x1e69, 0x10001, 0x9, 0x9, 0x4, 0x7fff, 0xffffffff, 0xffff, 0x4, 0x4, 0x3, 0xfaf, 0x5, 0x5, 0x401, 0x8001, 0x1, 0x5e08, 0x6, 0x38, 0x3c, 0x1, 0xffff, 0x8, 0x8dd5, 0x1, 0x409b, 0x8, 0x0, 0x4, 0x7a00, 0x80, 0x1a, 0x0, 0x100, 0x400, 0x6ac9, 0x450, 0x1, 0x1, 0x80, 0x7, 0x1, 0x9, 0x3ff, 0x1000, 0xa9, 0x6, 0xffffffff, 0x7, 0x3, 0x4, 0x7ff, 0x5, 0x1, 0x9, 0x3, 0x2, 0x7f, 0x2, 0x6, 0xfa9, 0x6, 0x7, 0x1, 0x1, 0xfffffe00, 0x6d5d, 0xa37, 0x3, 0xfffffe5e, 0x7fffffff, 0x4, 0x7fffffff, 0x5, 0xc7f, 0x500000, 0x3, 0x200, 0x2, 0x1, 0xffffff4d, 0x0, 0x0, 0x7f, 0x0, 0xfff, 0x9, 0x9, 0x800, 0xbde, 0x7, 0xae99, 0x3ff, 0x1, 0x8, 0x7, 0x8, 0x2, 0x9, 0x7, 0x81, 0x8000, 0x5, 0xffffff01, 0xffff27bf, 0x7fff, 0x68, 0x7, 0xffff, 0x0, 0x5, 0xffff8001, 0x800, 0x5, 0x7, 0x9, 0x8, 0x4, 0x1, 0x6, 0x3, 0x22f28547, 0x2, 0x8, 0x5, 0xa4, 0x5, 0x8, 0x7, 0xa28, 0x8, 0x0, 0x401, 0x1, 0x5, 0x8, 0x1, 0x8, 0x5, 0xfffffbff, 0x46, 0x90e, 0x81, 0x7c5d, 0x3, 0x8001, 0x1, 0xf0b7, 0x4, 0xffffffff, 0x7fffffff, 0xe6, 0x8, 0x2, 0x9, 0x9bb2, 0xf00, 0x8, 0x7, 0x1f, 0xce, 0x1, 0x4, 0x8, 0x2, 0xe1, 0x7fffffff, 0x5, 0x8001, 0x0, 0x0, 0x20, 0x1, 0x0, 0x6c7f, 0x4, 0x958c, 0x6, 0x8, 0x1, 0xd0ae, 0x7fff, 0x80000000, 0x2, 0x8, 0xfffffff7, 0x100, 0x401, 0x101, 0x7, 0x9, 0x8001, 0x1ff, 0xa37, 0x1f, 0x1, 0x2, 0x7fff, 0x8adb, 0x7, 0x9, 0x4, 0x6, 0x7, 0x1, 0x1760, 0x1, 0x42, 0x4, 0x7, 0x10001, 0x7fffffff, 0x5, 0x5, 0x3, 0x7, 0x26f45b95, 0x28000000, 0x6, 0x1, 0x7, 0x7, 0xab, 0x6, 0x8, 0x9a95, 0x1000, 0x0, 0x7fffffff, 0x3c, 0x0, 0x7ff, 0x1, 0x3732, 0x80000001, 0x800, 0x3, 0x3, 0x0, 0x3, 0x20, 0xffffffff, 0x8, 0x75c, 0x10000, 0x4, 0x0, 0x1, 0x6, 0x6, 0x1a, 0x1c, 0x0, 0x4, 0x1, 0x8, 0x6, 0x1, 0x4, 0x1, 0x6, 0x1, 0x1000, 0x5, 0x2e, 0x9, 0xc646, 0x8001, 0x7, 0x464, 0x3, 0x3, 0x1, 0xff, 0x9, 0x91, 0x5, 0x8, 0x4f4, 0x0, 0x800, 0x101, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0x5, 0x800, 0x1, 0x9, 0x8, 0x7fffffff, 0x2, 0xc80, 0x6, 0x0, 0x8, 0x6, 0x5c8, 0x7583, 0x1b075e39, 0x3, 0x0, 0x80000001, 0x7, 0x4, 0x4, 0x1000, 0x8, 0x0, 0x101, 0x200, 0x7, 0x8, 0x1, 0x7ff, 0xfe000000, 0x2, 0xd9, 0x80000000, 0x9, 0x3, 0xffffffd6, 0x5, 0xc6c, 0x1, 0xfff, 0x400000, 0xde8c, 0x79c, 0x3ff, 0x81, 0x8, 0x1, 0x2, 0x3, 0x7, 0x1ff, 0x3, 0x0, 0x7ff, 0x7fffffff, 0x800, 0x1, 0xffffffff, 0x2, 0x4, 0x5, 0xfffffffe, 0x20, 0x5, 0x1000, 0x3ff, 0x81, 0x6, 0x7, 0x3, 0xb3a, 0x0, 0x1, 0x7f, 0x3, 0x4, 0x2, 0xff, 0x5, 0x81, 0x11, 0x0, 0x40, 0xe0, 0x800, 0x3f, 0x2, 0x4, 0x200, 0xb74, 0xe7, 0x40, 0x6, 0x3f, 0x3, 0x2, 0x6, 0x7d, 0x7fffffff, 0x10000, 0x7, 0x3c6, 0x7, 0x4, 0x80, 0x18000000, 0x20, 0x3ff, 0x401, 0x8000, 0xdd3d, 0x3d, 0x3, 0x2b1, 0x1, 0x7, 0x7, 0xffffffff, 0x7fffffff, 0x80, 0x401, 0x80000000, 0x8, 0xfffffffe, 0x7, 0x7, 0x8001, 0x7]}) ioctl$HIDIOCGVERSION(r0, 0x80044801, &(0x7f0000001100)) openat$full(0xffffffffffffff9c, &(0x7f0000001d00), 0x98081, 0x0) [ 187.799550] Bluetooth: hci5: command 0x0406 tx timeout VM DIAGNOSIS: 00:01:14 Registers: info registers vcpu 0 RAX=0000000080000000 RBX=0000000000000000 RCX=0000000080000000 RDX=ffff888010010000 RSI=ffffffff81806d75 RDI=0000000000000005 RBP=ffff88801877bf70 RSP=ffff88800f1ef9b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000000081 R13=0000000000000000 R14=0000000000000000 R15=ffff88801877bf72 RIP=ffffffff81460c3d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fe69d21b900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe69c60e120 CR3=000000000f428000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 376cb7dfb78f66e2 0000000000135980 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 f39e68d800d5f296 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f840 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff0ecb584 R15=dffffc0000000000 RIP=ffffffff823bb0c1 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005624fb4e1648 CR3=0000000037a2c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=c676ef0000000000 401d FPR7=c000000000000000 4000 YMM00=0000000000000000 0000000000000000 00000000ff000000 0000000000000000 YMM01=0000000000000000 0000000000000000 636f6c63006b6165 6c6d656d6b2f6775 YMM02=0000000000000000 0000000000000000 0000000000ffffff ff00000000000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffff000000000000 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000