d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r10, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r11}}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) 01:01:55 executing program 3: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) 01:01:55 executing program 0: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r6) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r6) 01:01:55 executing program 3: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) 01:01:55 executing program 0: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 0: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r10, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r11}}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) 01:01:55 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x54, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r5, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r6) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) 01:01:55 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) syz_genetlink_get_family_id$devlink(&(0x7f0000000680), r1) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r10, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r11}}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) 01:01:55 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r12, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r13}}, 0x40) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:01:55 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r12, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r13}}, 0x40) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r12, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r13}}, 0x40) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) r3 = gettid() bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r1, r1, 0xc, 0x0, @val=@uprobe_multi={&(0x7f0000000440)='./file0\x00', &(0x7f0000000480), &(0x7f00000004c0)=[0x4, 0x2, 0x1, 0x2, 0x0, 0x4, 0x5, 0x2, 0x5], 0x7, 0x0, 0x1, r3}}, 0x40) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r5) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r12, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r13}}, 0x40) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) gettid() sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r12, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r13}}, 0x40) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001440)={r2, r12, 0x25, 0x0, @val=@netkit={@prog_fd=r6, r13}}, 0x40) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) syz_genetlink_get_family_id$fou(&(0x7f0000000400), r1) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3c}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040804}, 0x20000000) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r4) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r3) 01:01:55 executing program 0: syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r3) 01:01:55 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r3) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r3) 01:01:55 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r3) 01:01:55 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:55 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x505482, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), r1) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r3) 01:01:55 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 4: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r2) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death={0x400c630f, 0x3}], 0xe3, 0x0, &(0x7f00000000c0)="201ad068ba977d9118de613c72c4cb31622a9206c41141501aad7ee67fd5a55aae3f4acc763fb3a053d47da2131d16f0f4bf2c9d823d0be5d667d6c4cfbcf78b91bce31e1074e2ff3a08e29a61091c89b2b0505259d17ee5238d55fcc25e38a471e476c9adc1c14883418182e7a97b0e44a529e583d9ccf0dd81c07f813477ab1e44acd8b0bcd6e3365a97527473c492c00ffb57059382e6c05de5771e1a9b26ffa4a10b4d72a7bb3ba965509a6be19041aa32fd1fae050395d308fe4404460c41e89de74e465793e68a5ae64837d891dd3ee6743710d748afbbed7af13d149dcecb0a"}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r1, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r2) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 2: bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@ipv6_getnexthop={0x20, 0x6a, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NHA_OIF={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x4480c}, 0x80) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x611e}]}, 0x30}, 0x1, 0x0, 0x0, 0x50}, 0x4008804) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r1) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x4008804) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r0) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 4: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00'}) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r0) 01:01:56 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, r0) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:56 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:56 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 2: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r7 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r1, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:56 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:56 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r7 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r1, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r7 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r1, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000c80)=0x1) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000c80)=0x1) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000c80)=0x1) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080), 0x80) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:57 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:57 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:57 executing program 3: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: statx(0xffffffffffffffff, 0x0, 0x4000, 0x0, &(0x7f0000000d00)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: statx(0xffffffffffffffff, 0x0, 0x4000, 0x0, &(0x7f0000000d00)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 2: statx(0xffffffffffffffff, 0x0, 0x4000, 0x0, &(0x7f0000000d00)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x0, 0x0, &(0x7f0000000d00)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 3: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 2: statx(0xffffffffffffffff, &(0x7f0000000cc0)='./file1\x00', 0x0, 0x0, 0x0) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x0, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 2: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x0, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, 0x0, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, &(0x7f0000000640)=""/20, 0x0, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 4: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:58 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:58 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 4: pipe2$watch_queue(&(0x7f0000000080), 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:58 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000e40)=0x9) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r3) statx(r3, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r3, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) [ 38.842448][ T3446] ================================================================== [ 38.850594][ T3446] BUG: KCSAN: data-race in generic_fillattr / shmem_mknod [ 38.857924][ T3446] [ 38.860631][ T3446] read-write to 0xffff888103705e30 of 8 bytes by task 3445 on cpu 0: [ 38.868802][ T3446] shmem_mknod+0x106/0x180 [ 38.873269][ T3446] shmem_create+0x34/0x40 [ 38.877753][ T3446] path_openat+0xdc2/0x1d40 [ 38.882301][ T3446] do_filp_open+0xf6/0x200 [ 38.887107][ T3446] do_sys_openat2+0xab/0x110 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) [ 38.891921][ T3446] __x64_sys_openat+0xf3/0x120 [ 38.896952][ T3446] do_syscall_64+0xcd/0x1d0 [ 38.902504][ T3446] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 38.909070][ T3446] [ 38.911605][ T3446] read to 0xffff888103705e30 of 8 bytes by task 3446 on cpu 1: [ 38.919175][ T3446] generic_fillattr+0x144/0x2f0 [ 38.924166][ T3446] shmem_getattr+0x17b/0x200 [ 38.929272][ T3446] vfs_getattr+0x198/0x1e0 [ 38.934381][ T3446] vfs_statx+0x140/0x320 [ 38.938747][ T3446] vfs_fstatat+0xcd/0x100 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x1010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) [ 38.943145][ T3446] __se_sys_newfstatat+0x58/0x260 [ 38.948314][ T3446] __x64_sys_newfstatat+0x55/0x60 [ 38.953425][ T3446] do_syscall_64+0xcd/0x1d0 [ 38.957960][ T3446] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 38.964118][ T3446] [ 38.966454][ T3446] value changed: 0x000000000000161c -> 0x0000000000001630 [ 38.974878][ T3446] [ 38.977221][ T3446] Reported by Kernel Concurrency Sanitizer on: 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) [ 38.983562][ T3446] CPU: 1 PID: 3446 Comm: udevd Not tainted 6.8.0-rc6-syzkaller-00024-ge326df53af00 #0 [ 38.994353][ T3446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 39.005395][ T3446] ================================================================== 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x0, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r2) statx(r2, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r2, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:01:59 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:01:59 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, 0x0, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r1) statx(r1, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r1, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r1, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000e40)=0x9) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) r7 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r5, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(0xffffffffffffffff, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r1) statx(r1, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r1, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r1, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000e40)=0x9) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) r7 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r5, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "158334e704360fd8324174ce90814d79b1b1ef9715b1f29afaca83db3ce574a7aede82529fb4584597cc111096acc0b787c53ee3b1ba04c362553c9c20fc71486fa729f308444770407cf2a4eee91c1bfd154a2d00d80079c0774be26ce7ff3e84e3cb13ade1ac094f9a488e55858790987ac5e2190ef215c0bc4f5e93c4f19b56b30478557d20183575eeb769ef2204f09a1fef6843d13298262554e0f2e5e584aa93c52dfab5a5c18fbf4a683e873c49d29d9600e3287fde8844e31a798408a54721006b33257f35315eb173e4bc2a880c46176efed19e2825759aca61deb6c2df1fa20dd3b20873730d3f4825ed2486e1d6ff5d48ec12d584b499f7b67bcd", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(0xffffffffffffffff, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, 0x0, &(0x7f0000000f40)) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r1, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r3, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r4) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000c80)=0x1) statx(r4, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r5 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000e40)=0x9) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r4, 0x8000000) r7 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r6, r9, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r5, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r10}, @CGW_DST_IF={0x8, 0xa, r2}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(0xffffffffffffffff, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r8, r9, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r7, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r1) statx(r1, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r1, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, 0x0, &(0x7f0000000f40)) 01:02:00 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 0: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r1) statx(r1, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r1, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000f40)) 01:02:00 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, 0x0, &(0x7f0000000f40)) 01:02:00 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0) statx(r0, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0) statx(r0, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 1: r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r2, 0xcb04, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r3, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r2, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r2) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r5, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r6) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000c80)=0x1) statx(r6, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r7 = accept4$phonet_pipe(r1, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000e40)=0x9) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r6, 0x8000000) r9 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r8, r11, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r7, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r12}, @CGW_DST_IF={0x8, 0xa, r4}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r2, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r10, r11, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r9, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000f40)) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0) statx(r0, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, 0x0, &(0x7f0000000f40)) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 1: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r1, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0) statx(r0, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 1: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fd, @flat=@binder={0x73622a85, 0x1000, 0x1}, @fda={0x66646185, 0x0, 0x2, 0x2c}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @request_death={0x400c630e, 0x2}], 0xe6, 0x0, &(0x7f0000000480)="321cfe9fdc905719c9ada76dd6daf9df1cad5b2aab4bbe183376cb0182d91a3862db9f52800ec30342ce8438e90283757bd065d97dd62a75af501d057941e0dab7c5eba7f5432c9a285f8bd08cf036bdcad6e634c64ef5c35da32d4b853bba0fe282d114a76bef8095f9c33fddd88dae9863573eabdae28461d1397f098b068280b2813c1b40dd65517eaa60d2ed74b3dcbc8139efdc55790667ce21b3b3f51497ebbcaa5bcf6487844ca6de0b22f99a78197a719e11987d0c31e2a690e7d9b6323d447cacbbfc05ebeccfbaec07d75d1ce61ed03455b68f2d878f16cd71b86cec509b339de6"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@fwd={0x2}, @enum={0x10, 0x3, 0x0, 0x6, 0x4, [{0x2, 0x80}, {0x8, 0x2}, {0x7, 0x5}]}]}, {0x0, [0x0, 0x0, 0x30, 0x30, 0x30, 0x2e, 0x61, 0x30]}}, &(0x7f0000000640)=""/20, 0x52, 0x14, 0x1, 0x29e}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, r1, 0xcb04, '\x00', r2, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000800)={'erspan0\x00', r2, 0x40, 0x8000, 0x30, 0x400, {{0x2f, 0x4, 0x2, 0x7, 0xbc, 0x67, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010101, @loopback, {[@timestamp={0x44, 0x14, 0x34, 0x0, 0x0, [0x708, 0x5, 0x1, 0xab88]}, @ra={0x94, 0x4}, @noop, @end, @generic={0x7, 0xe, "3de649ef018c4f0854acfe7c"}, @timestamp={0x44, 0x20, 0x98, 0x0, 0x3, [0x101, 0xff, 0x9, 0x0, 0x6, 0x6, 0x10001]}, @end, @timestamp_addr={0x44, 0x3c, 0x66, 0x1, 0x2, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x1}, {@remote, 0x9c4}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7fff}, {@rand_addr=0x64010101, 0x7}]}, @generic={0x7, 0x10, "788fa8fd44df3742bd9806300d45"}, @generic={0x7, 0x11, "d5f51e018d7f69e26c84f49490e452"}]}}}}}) statx(r1, &(0x7f0000000940)='./file0\x00', 0x6000, 0x2, &(0x7f0000000980)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000ac0), r1) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x58, r4, 0x220, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffff001}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x40) socket$vsock_stream(0x28, 0x1, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r5) ioctl$SIOCPNGETOBJECT(r5, 0x89e0, &(0x7f0000000c80)=0x1) statx(r5, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r6 = accept4$phonet_pipe(r0, 0x0, &(0x7f0000000e00), 0x80000) ioctl$SIOCPNGETOBJECT(r6, 0x89e0, &(0x7f0000000e40)=0x9) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r5, 0x8000000) r8 = syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r7, r10, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, r6, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000001080)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000012c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001280)={&(0x7f00000010c0)=@can_delroute={0x194, 0x19, 0x100, 0x70bd2a, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8}, @CGW_MOD_OR={0x15, 0x2, {{{0x3, 0x1}, 0x1, 0x2, 0x0, 0x0, "d0f414378753787f"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0xb, 0x39, 0x36, 0x81, 0x0, "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", 0x0, "f97469080ef86f0faaabd134d9f9c64c9d0fad71"}}, @CGW_SRC_IF={0x8, 0x9, r11}, @CGW_DST_IF={0x8, 0xa, r3}, @CGW_MOD_XOR={0x15, 0x3, {{{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "771cab3e473c5523"}, 0x4}}, @CGW_LIM_HOPS={0x5, 0xd, 0x40}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0xfffffffffffffff8, 0xfffffffffffffff8, 0x40}}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0xfffffffffffffff8, 0xfffffffffffffffc, 0x7f}}]}, 0x194}, 0x1, 0x0, 0x0, 0x40080}, 0x40004) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001400)={@map=0x1, 0x0, 0x0, 0x4, &(0x7f0000001300)=[0x0], 0x1, 0x0, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bind$phonet(r1, &(0x7f0000001480)={0x23, 0x3f, 0x3f, 0x85}, 0x10) syz_io_uring_submit(r9, r10, &(0x7f00000014c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd=r8, 0x0, 0x0, 0x0, 0x1, 0x1}) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000e00), 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x10, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, &(0x7f0000000f00), &(0x7f0000000f40)) 01:02:00 executing program 0: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0xcb04, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, &(0x7f0000000780)) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'vxcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x40, 0x200) syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), r0) statx(r0, &(0x7f0000000cc0)='./file1\x00', 0x4000, 0x0, &(0x7f0000000d00)) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000d, 0x1010, r0, 0x8000000) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x1, 0x3c5}, &(0x7f0000000f00), &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000001000)=@IORING_OP_CONNECT={0x10, 0x66, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000f80)=@pppoe={0x18, 0x0, {0x3, @empty, 'batadv0\x00'}}}) 01:02:00 executing program 2: syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x193c, 0x2, 0x0, 0x3c5}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, 0x0) syz_io_uring_setup(0x5cd5, &(0x7f0000000e80)={0x0, 0x0, 0x2}, &(0x7f0000000f00), 0x0) 01:02:00 executing program 1: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'tunl0', 0x32, 0x37}, 0x8) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/171, 0xab, 0x0, 0xc}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/178, 0xb2, 0x0, 0x1e}, @flat=@binder={0x73622a85, 0x1, 0x3}}, &(0x7f00000002c0)={0x0, 0x28, 0x50}}}, @release={0x40046306, 0x1}, @transaction={0x40406300, {0x3, 0x