0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) 04:57:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 04:57:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 04:57:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) 04:57:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 04:57:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 04:57:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 04:57:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r2) 04:57:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) 04:57:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) 04:57:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) 04:57:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:49 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:49 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:49 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:57:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:57:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:50 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:50 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:57:50 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:50 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:50 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:51 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:51 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:52 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:52 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:53 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:53 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:53 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:53 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:54 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:54 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:54 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:55 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:55 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:57:55 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:55 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:56 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:57:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:56 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:56 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:57:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:57 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:58 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:58 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:58 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:57:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:57:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:57:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:57:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:59 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:57:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:57:59 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:57:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:57:59 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:00 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:00 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:00 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:58:00 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:01 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:01 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:01 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:02 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:02 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:02 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:03 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:03 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:03 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:03 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:03 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:03 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:03 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:04 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:04 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:05 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:05 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:05 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:05 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:05 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:06 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:06 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:06 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:06 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:06 executing program 1: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:06 executing program 1: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:06 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:06 executing program 1: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:07 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:07 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:07 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) 04:58:07 executing program 2: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:07 executing program 2: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:07 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:07 executing program 2: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:07 executing program 1: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:07 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) 04:58:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:08 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:08 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) 04:58:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:08 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:08 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) 04:58:09 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:09 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:09 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:10 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:12 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:12 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:12 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x11) 04:58:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:12 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:13 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:13 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:14 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:14 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:14 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:14 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:15 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:15 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:15 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:15 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:16 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:16 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:17 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) 04:58:17 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:17 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:17 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:18 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:18 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:18 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:18 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:19 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:19 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:19 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:19 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4048854}, 0x0) 04:58:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}}, 0x11) 04:58:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4048854}, 0x0) 04:58:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:20 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4048854}, 0x0) 04:58:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:20 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:20 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:21 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:21 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:21 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4048854}, 0x0) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:21 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:22 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:22 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:22 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:22 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:22 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:23 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:23 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:23 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:23 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:23 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:24 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:24 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:24 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:24 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) 04:58:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:24 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:24 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:25 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:25 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:25 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:25 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:25 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:26 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:26 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:27 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:27 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:27 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:27 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:27 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:28 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:28 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:28 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:28 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:28 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:28 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:29 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:29 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:29 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:29 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:29 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:29 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:30 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:30 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:30 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:30 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:30 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:30 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:30 executing program 2: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:30 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:30 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:30 executing program 4: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r0, 0x1}}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r1) 04:58:31 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:31 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:31 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:31 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:31 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:31 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:32 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:32 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:32 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:32 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:32 executing program 5: syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:32 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:32 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:33 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:33 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:33 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:33 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:33 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:33 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:34 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:34 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:34 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:34 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:34 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:34 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:35 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:35 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:35 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:35 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:35 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:35 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:36 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:36 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:36 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:36 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:36 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:36 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:37 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) 04:58:37 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:37 executing program 0: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:37 executing program 0: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:37 executing program 0: write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r0}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:37 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:37 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:38 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:38 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:38 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:38 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:38 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:38 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:39 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:39 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:39 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:39 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:39 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:39 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:40 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {0x0, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:40 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:40 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:40 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:41 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:41 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x0, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x0, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x0, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:41 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x0, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:41 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x0, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) 04:58:42 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:42 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:42 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x0, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:42 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:42 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x0, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:42 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) 04:58:43 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, r2) 04:58:43 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:43 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x0, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:43 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) 04:58:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:44 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) 04:58:44 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048854}, 0x11) 04:58:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) 04:58:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) 04:58:44 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) 04:58:44 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) 04:58:45 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:45 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:45 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) 04:58:45 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:45 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) 04:58:45 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:46 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:46 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) 04:58:46 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r1}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0)}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:58:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:46 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:46 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:46 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:47 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:47 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:47 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:47 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:47 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:47 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:48 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:48 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:48 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) 04:58:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) 04:58:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) 04:58:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0x360, 0x9, 0x9, 0x3b}) ioctl$TCFLSH(r0, 0x540b, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:58:49 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:49 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:49 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f0000000280)={0x11, 0xffffffffffffff09, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r3, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r4, 0x4b63, &(0x7f0000000100)=0x3) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r7, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r5) 04:58:49 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) 04:58:49 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)) syz_open_dev$ptys(0xc, 0x3, 0x1) 04:58:49 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) 04:58:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/122) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x81) 04:58:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) 04:58:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 04:58:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x20, 0xda, 0xe80}) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="5aca2086aec4dc3eb000a0699f9c3ad49039e3aefabd1b2b08104ddf90bf0bf41dcd5ce01306940308374091e60e944823bc8aa736e34c77477bf570ebd9a4153dc9761c4c2e74b0196d2cfd7f697c6c177053f6d74fac3b424a1f1f42e28a2d721623e47d9658b1b92d0e25b875527807ac171960c1be02d328976f5f7455bda54ac0d98d69bb1b8638460059284d9ce27a1455a2c1b8d250848a8017b491817d0ff39fae160821083e8758932cd8dd3e32e4a47e07a773b801a2d6782cb12ae3df35847af5858cf6580e96c30879") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r4, 0xd04, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00'}) 04:58:50 executing program 3: r0 = semget$private(0x0, 0x2, 0x10) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0x2aee, 0x1000}, {0x1, 0x2}], 0x2, &(0x7f0000000080)={0x0, 0x3938700}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x884, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000140)={0x40, 0x3, 0x8}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) r3 = syz_open_dev$dri(&(0x7f0000000200), 0x7, 0x300) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000240)={0x0, 0x2}) semctl$SEM_STAT_ANY(0xffffffffffffffff, 0x3, 0x14, &(0x7f0000000180)=""/125) 04:58:50 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 04:58:50 executing program 5: syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:58:50 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 04:58:50 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x4001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:58:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCEXCL(r1, 0x540c) 04:58:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$DRM_IOCTL_GET_CTX(r2, 0xc0086423, &(0x7f0000000000)={0x0, 0x5}) 04:58:50 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/122) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x81) 04:58:50 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x10) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000140)={0xdc, 0x7}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x5) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000100)=0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8) 04:58:50 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000080)={0x6, 0x1a15, 0x80000000}) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x7, 0x800, 0x6}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:58:50 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r2}}, 0x128) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x1, {0x80000001, 0x7, "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", 0x6, 0x20, 0x10, 0x2, 0x7, 0x5, 0x3, 0x1}, r2}}, 0x128) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x3, 0x2}, 0x6) 04:58:51 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCNXCL(r2, 0x540d) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)) ioctl$TIOCEXCL(r0, 0x540c) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$KDENABIO(r1, 0x4b36) 04:58:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:51 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 04:58:51 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x0) write$uinput_user_dev(r1, &(0x7f0000000100)={'syz0\x00', {0x8, 0x8, 0x8001, 0x9}, 0x2c, [0x9ba0, 0x5, 0xff, 0x7fffffff, 0x8, 0x9f, 0x80000001, 0x2, 0x3, 0x5, 0x4, 0x6, 0x5, 0x7, 0x47, 0x3, 0x91, 0x0, 0x4, 0x1ff, 0x2, 0x0, 0x6, 0x3, 0x4, 0x7, 0x1ff, 0x8, 0x3, 0xffffffff, 0x1, 0x100, 0x5ac19148, 0x800, 0x5, 0x8, 0x7fffffff, 0x0, 0x2e, 0x3, 0x1, 0x1, 0x6, 0x7f9f2b20, 0x800, 0x3fe, 0x5, 0xca, 0x5, 0xa9, 0xffff, 0x17f0e21b, 0x6, 0x5, 0x4, 0x9c9, 0x7, 0x2, 0x8000000, 0x4, 0x53c6, 0xc8, 0x101, 0x8ab], [0x1, 0x0, 0x1, 0x3, 0x6a7, 0x80, 0xd8ca, 0x0, 0x4, 0x9089, 0x739, 0x8, 0x7f, 0x97d, 0x7ff, 0x4, 0x10001, 0x6, 0x10000, 0x101, 0x92, 0x6, 0xffffffff, 0x8, 0x0, 0xfd9, 0x0, 0x1f, 0x80, 0x6, 0x7, 0x5002, 0xd31a, 0x1f, 0xc6ee, 0x7f, 0x1afd7b21, 0x0, 0x1, 0x3, 0x3, 0x7f, 0x1, 0x7f, 0xffff, 0x4, 0x70, 0x6, 0x8, 0x1, 0x9, 0x6, 0x4, 0x4, 0x7fff, 0x80000001, 0x1, 0xffffffe0, 0x1, 0x200, 0x80000001, 0x200, 0x1, 0x548], [0x80000000, 0xff, 0x4, 0x10000, 0x2, 0x1f, 0x5, 0xed2a, 0x7, 0xf8, 0x8, 0xffffffc1, 0xff, 0xd677, 0x3, 0x7, 0x8, 0x66930e77, 0x1ff, 0x0, 0x3, 0x1000, 0x3f, 0x9c8, 0x2, 0x1ff, 0x1, 0x10001, 0x200, 0x8, 0x4, 0x7fff, 0x3, 0x1, 0xfff, 0x1, 0x101, 0x78e15fc0, 0x3, 0x7, 0xa0, 0x3, 0x3f, 0xffffffe1, 0x7ff, 0xfffffffb, 0xfffffe00, 0x5, 0x81, 0x9, 0x4, 0xfff, 0xa045, 0xdf, 0x2, 0x2, 0x9, 0x70, 0x5b, 0x6, 0x0, 0x101, 0x1, 0x5], [0x6, 0x1f, 0x3, 0x400, 0x3f, 0x5, 0x3f, 0x6, 0x7ff, 0x3, 0x5, 0x9, 0xfffffffd, 0x6, 0x7ff, 0xfb66, 0x2, 0x8, 0x9, 0xfff, 0x0, 0x1ff, 0x8000, 0x3ff, 0x7f, 0x8, 0xe1a, 0x8, 0x7, 0x1966, 0x13, 0xdeb, 0x3, 0xff, 0x2, 0xfffff873, 0x8001, 0x81, 0x2, 0x39, 0x5, 0xe4d50d5, 0xffff, 0x5, 0x6, 0xffffffff, 0xfffffffc, 0x9, 0x81, 0x70, 0x8, 0x2, 0xc6, 0x80, 0x20, 0x3, 0x18, 0x66, 0x0, 0x200, 0x0, 0x40, 0x4645, 0xfff]}, 0x45c) 04:58:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000080)={0x7f, 0x40, 0x80}) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) 04:58:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x12) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 04:58:51 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:51 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/122) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x81) 04:58:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 04:58:51 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfffffff8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000080)) 04:58:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)) 04:58:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)) 04:58:51 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)) 04:58:51 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)) [ 905.014929] Bluetooth: hci1 command 0x0401 tx timeout 04:58:52 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) 04:58:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0xe3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:58:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:52 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0xe3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:58:52 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:52 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/122) 04:58:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:52 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:52 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:52 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:53 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$TIOCSRS485(r2, 0x542f, &(0x7f0000000180)={0x2, 0xff, 0x5}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:53 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:58:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:53 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)=0xcfdf) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000000)="fa2aa131ce2896aa5d7ae7c88f37b3097acf03a6c7cd166ac0df8567398c126ebbfa3b870b36f88d26670cf70ef578addcdf71a3e2dd") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 3: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:53 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000080)=0xcfdf) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) 04:58:53 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:54 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) [ 907.109494] Bluetooth: hci1 command 0x0401 tx timeout 04:58:54 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) 04:58:54 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:54 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) 04:58:54 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:54 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:54 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:54 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:54 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x6) 04:58:54 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x101802, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)) 04:58:54 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:54 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) 04:58:55 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000080)={0x1, 0x4, '\r0V', 0x1, 0x80}) syz_open_dev$tty20(0xc, 0x4, 0x0) 04:58:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x880, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:55 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:55 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) 04:58:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:55 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:55 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:58:56 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x3, [0x3f, 0x3], 0x1ff}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) 04:58:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x880, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:58:56 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:56 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) [ 909.174794] Bluetooth: hci1 command 0x0401 tx timeout 04:58:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000140)) 04:58:56 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x6) 04:58:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:58:56 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:56 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:56 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 04:58:56 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:56 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 04:58:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:57 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:57 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)) 04:58:57 executing program 2: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000140)) 04:58:57 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:57 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:57 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:57 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:57 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/89) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x800000107fffffb) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x29) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x101) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) 04:58:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 04:58:57 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:57 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 04:58:57 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:57 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x12) 04:58:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:58 executing program 3: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x5a783, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f00000000c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) 04:58:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) 04:58:58 executing program 4: ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x12) 04:58:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:58 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000000)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:58 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x2d) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000080)) 04:58:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x12) 04:58:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) [ 911.254626] Bluetooth: hci1 command 0x0401 tx timeout 04:58:58 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) 04:58:58 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:58 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:58 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)=0x1) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xb59) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) 04:58:58 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:58 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) 04:58:58 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, &(0x7f0000000180)="00854e78994052cd5187f85e95b93bec027e231446a9449eed0fc0cff3e9fb941349ec2ac6df0610b8b710b74f36c2570b433cc07445a79b85c94c0513fb982a1d74f2ea9269c616193133a81489") bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:59 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x12) 04:58:59 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:59 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x37) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) ioctl$TIOCGISO7816(r2, 0x80285442, &(0x7f0000000280)) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) r4 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r4, &(0x7f0000000080)) ioctl$BINDER_GET_FROZEN_INFO(r3, 0xc00c620f, &(0x7f0000000240)={r4}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7fff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x4) 04:58:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:59 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x12) 04:58:59 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, &(0x7f0000000480)={0x4, 0x8, 0xfa00, {r1, 0x1}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:58:59 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:58:59 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:58:59 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:58:59 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) 04:59:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x2}, 0x6) 04:59:00 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:00 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:00 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4000011) 04:59:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) 04:59:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 04:59:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) [ 913.334556] Bluetooth: hci1 command 0x0401 tx timeout 04:59:00 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:00 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x12) 04:59:00 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:00 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x30ddc2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)={0xb8, 0x15, &(0x7f0000000180)}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000640)={0x0, &(0x7f0000000580)=""/183}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x448401, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000007c0)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000780)={0x12, 0x65, 0xfa00, {&(0x7f00000006c0), 0xffffffffffffffff, r5}}, 0x18) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r6, 0x0, 0x0) ioctl$TIOCMBIS(r6, 0x5416, &(0x7f0000000800)=0x23) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f0000000080)={0x4, 0x4081, 0x1}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0x1b) 04:59:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 04:59:00 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 04:59:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 04:59:01 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000080)="76ff59dfa7396cd8394b8f02ef9e34b261c4d8706de13424d291fb17a1482ee9b3914f99d51c6d015cc681bd90ee4e32127f9c5e6a32473715d1a6ca4e6a31faea44daebe50e66e814170177a2e1") ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:01 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000000)={0xd2, 0xa, &(0x7f0000000100)="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"}) 04:59:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 04:59:01 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x108fc263}]}, 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x24000010) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:01 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x940, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCCBRK(r0, 0x5428) 04:59:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 04:59:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x108fc263}]}, 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x24000010) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:01 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:01 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x1) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0xc2000, 0x0) 04:59:01 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x0) 04:59:01 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x108fc263}]}, 0x50}, 0x1, 0x0, 0x0, 0x44050}, 0x24000010) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:02 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 04:59:02 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2a81c0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:02 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:02 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:02 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:02 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 04:59:02 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001080), r1) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000080)="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") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x1c, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x50) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000001200)) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x20}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) 04:59:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) [ 915.414321] Bluetooth: hci1 command 0x0401 tx timeout 04:59:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:02 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:02 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:02 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:02 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) socketpair(0x15, 0x800, 0x6, &(0x7f0000000080)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 0: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:03 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:03 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:03 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:04 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 3: syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000002c0)=0x15) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 5: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 04:59:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) [ 917.494955] Bluetooth: hci1 command 0x0401 tx timeout 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 04:59:04 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x14) 04:59:04 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:04 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 04:59:04 executing program 4: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:04 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:05 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000100)="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") ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x202400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000200)="fd7c8db2c98f42c655ef602a02b98916501cb2903002103dc4ed7c35364aae94d1163637ee1c17e67c0f308f74b2ee137c8ea43fa1c724b19bebe4b6ae625c727713464556e7f4a6c0638d0b16e9bcb0bfc876899f0711c35bdf09655830817f7da226ba1a943288b2debd4c4cee941b5c14b7ce6930b1c87a") ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) 04:59:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 04:59:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, 0x0) 04:59:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 04:59:05 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) 04:59:05 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:05 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:05 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:06 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:06 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 3: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:06 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:06 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:07 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:07 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x351b02, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:07 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:07 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:07 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:07 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:07 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:08 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:08 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:09 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:09 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:09 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:09 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:10 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:10 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:10 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:10 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:10 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) 04:59:10 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0x6) 04:59:10 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:10 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 3: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000100)=0x3) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:11 executing program 3: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 04:59:11 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:11 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x178, 0x1, &(0x7f0000000100)}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0xa8002, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000500)=0x115, 0x4) 04:59:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:12 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:12 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:12 executing program 5: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) 04:59:12 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:12 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000100)="376dd121196e1d2ef54d6d4c5d4b756e2e03523dc877f2982306fa4ff97f315579c24ad86003b61f45d442f753e46867baf6e6148d602ce9069024c313606042fed42171102e8cf6b5893cdf7e0de7f3806e81226bb4d80fa3ee25d094847215b5e7929564ebfc3aade251998c578a1f71730ea368894f1501434dd369935955502c2406f02d00c8ed184b449228d232561b853f9de849105bdfb5d0d80ae5de6d1ef1e76c2a3b65f93ff24a00ef6100b5e8fc23") 04:59:12 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:12 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) 04:59:12 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:12 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x3}, 0x6) 04:59:12 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:12 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:12 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:12 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) 04:59:13 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:13 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:13 executing program 3: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) 04:59:13 executing program 1: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:13 executing program 2: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:13 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:13 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:13 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:13 executing program 3: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) 04:59:13 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000340), 0x0, 0x81) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:13 executing program 5: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:13 executing program 3: ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) 04:59:13 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:13 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:13 executing program 5: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:13 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:14 executing program 5: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:14 executing program 4: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:14 executing program 2: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x4, 0xc3cefc031197a208}, 0x6) 04:59:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:14 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:14 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:14 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:14 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:14 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:14 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:14 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:14 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:14 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0xc3cefc031197a208}, 0x6) 04:59:14 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}) 04:59:15 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:15 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 04:59:15 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:15 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:15 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 04:59:15 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:15 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:15 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) 04:59:16 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:16 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:16 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 04:59:16 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:16 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:16 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:16 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 04:59:16 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:17 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000180)}) 04:59:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:17 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x0, 0x0}) 04:59:17 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:17 executing program 5: sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @local}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0xcc, 0x10, &(0x7f0000000180)}) 04:59:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)}) 04:59:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:17 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x24fb, 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f0000000080)=[{}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r3, 0x1}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r4, 0x0, 0x0) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000580)={0x24, 0x2, &(0x7f0000000180)="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"}) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, r7, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 04:59:17 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:17 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:17 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)}) 04:59:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:18 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)}) 04:59:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:18 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:18 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:18 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:18 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:18 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:18 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) 04:59:18 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:18 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:18 executing program 2: ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x14) 04:59:18 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:18 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:18 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 04:59:18 executing program 5: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:19 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:19 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:19 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:19 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:19 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:19 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:19 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:19 executing program 5: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, 0x2}, 0xeb84) 04:59:19 executing program 3: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:19 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:19 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:20 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:20 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:20 executing program 3: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:20 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000000)={0x10000, 0x4, 0x8}) 04:59:20 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:20 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:20 executing program 3: ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:20 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:20 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) 04:59:20 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:20 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:20 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x175, 0x5, &(0x7f0000000100)}) 04:59:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000000)={0x175, 0x5, &(0x7f0000000100)}) 04:59:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) 04:59:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:21 executing program 2: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 04:59:21 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) 04:59:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:21 executing program 3: syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:21 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x175, 0x5, &(0x7f0000000100)}) 04:59:21 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x175, 0x5, &(0x7f0000000100)}) 04:59:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:21 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r3}}, 0x128) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x9e, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x1f, @remote, 0x100}, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}, 0x118) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x22040, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:21 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x5, 0x8, 0xb0e}) 04:59:21 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x19) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="aa0065bbd19ed03c555c8f8e3921955b785608c8cdfea4df144d91f3fcfa9d88f1a4e39e743011ea1e8b22c1cc7cf95456f086b604de844cc986cd7656a220b45492313ec6fd6b403c6418e6967a0389bd8828612e0d026782") 04:59:21 executing program 4: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x2}, 0x6) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48081}, 0x8004000) 04:59:21 executing program 5: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000000)={0x175, 0x5, &(0x7f0000000100)}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:21 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:21 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) 04:59:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x0, 0x0}) 04:59:22 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) 04:59:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000100)={0x2, "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"}) 04:59:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000000)={0x5, 0x8, 0xb0e}) 04:59:22 executing program 4: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x0, 0x0}) 04:59:22 executing program 2: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250900000008000b000900000008000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r2, @ANYBLOB="0500150007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3c8558ae) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:22 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x11200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040026bd7000fcdbdf250900000008000b000900000008000300", @ANYRES32=0x0, @ANYBLOB="08000600", @ANYRES32=r2, @ANYBLOB="0500150007000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r3, 0x0, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x3c8558ae) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:22 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x0, 0x0}) 04:59:22 executing program 3: r0 = semget$private(0x0, 0x1, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) semctl$GETNCNT(r0, 0x2, 0xe, &(0x7f0000000100)=""/179) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) 04:59:22 executing program 0: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40040, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCNXCL(r2, 0x540d) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="16b5cdf060093fa78732bcaf62ed4a729a0cd1aa18e7d830") openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 1: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x1}}, 0x18) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x14) r2 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000300)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x1}}, 0x18) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x100014) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000100)=""/77) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x2400c8dc) ioctl$TCFLSH(r1, 0x540b, 0x1) 04:59:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="aa0065bbd19ed03c555c8f8e3921955b785608c8cdfea4df144d91f3fcfa9d88f1a4e39e743011ea1e8b22c1cc7cf95456f086b604de844cc986cd7656a220b45492313ec6fd6b403c6418e6967a0389bd8828612e0d026782") 04:59:22 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x803, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 04:59:22 executing program 3: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000000)) 04:59:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="aa0065bbd19ed03c555c8f8e3921955b785608c8cdfea4df144d91f3fcfa9d88f1a4e39e743011ea1e8b22c1cc7cf95456f086b604de844cc986cd7656a220b45492313ec6fd6b403c6418e6967a0389bd8828612e0d026782") ioctl$TIOCCBRK(r1, 0x5428) 04:59:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) (fail_nth: 1) 04:59:22 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) (fail_nth: 1) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:22 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) 04:59:22 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:22 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) (fail_nth: 1) 04:59:22 executing program 4: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x19) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f00000000c0)="aa0065bbd19ed03c555c8f8e3921955b785608c8cdfea4df144d91f3fcfa9d88f1a4e39e743011ea1e8b22c1cc7cf95456f086b604de844cc986cd7656a220b45492313ec6fd6b403c6418e6967a0389bd8828612e0d026782") ioctl$TIOCCBRK(r1, 0x5428) [ 935.730636] FAULT_INJECTION: forcing a failure. [ 935.730636] name failslab, interval 1, probability 0, space 0, times 0 [ 935.769312] CPU: 1 PID: 24630 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 935.777211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 935.786561] Call Trace: [ 935.789152] dump_stack+0x1b2/0x281 [ 935.792789] should_fail.cold+0x10a/0x149 [ 935.796941] should_failslab+0xd6/0x130 [ 935.800920] kmem_cache_alloc_trace+0x29a/0x3d0 [ 935.805590] gsmld_open+0x9e/0x7b0 [ 935.809129] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 935.813363] tty_ldisc_open+0x6c/0xb0 [ 935.817161] tty_set_ldisc+0x287/0x5d0 [ 935.821049] tty_ioctl+0xa2a/0x1430 [ 935.824675] ? tty_fasync+0x2c0/0x2c0 [ 935.828474] ? proc_fail_nth_write+0x7b/0x180 [ 935.832966] ? trace_hardirqs_on+0x10/0x10 [ 935.837200] ? fsnotify+0x974/0x11b0 [ 935.840913] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 935.845838] ? __handle_mm_fault+0x80f/0x4620 [ 935.850335] ? SyS_write+0x1b7/0x210 [ 935.854058] ? tty_fasync+0x2c0/0x2c0 [ 935.857857] do_vfs_ioctl+0x75a/0xff0 [ 935.861656] ? lock_acquire+0x170/0x3f0 [ 935.865632] ? ioctl_preallocate+0x1a0/0x1a0 [ 935.870040] ? __fget+0x265/0x3e0 [ 935.873491] ? do_vfs_ioctl+0xff0/0xff0 [ 935.877463] ? security_file_ioctl+0x83/0xb0 [ 935.881869] SyS_ioctl+0x7f/0xb0 [ 935.885231] ? do_vfs_ioctl+0xff0/0xff0 [ 935.889211] do_syscall_64+0x1d5/0x640 [ 935.893103] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 935.898286] RIP: 0033:0x7fe0f9043049 [ 935.902002] RSP: 002b:00007fe0f7997168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 935.909790] RAX: ffffffffffffffda RBX: 00007fe0f9156030 RCX: 00007fe0f9043049 [ 935.917050] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 935.924311] RBP: 00007fe0f79971d0 R08: 0000000000000000 R09: 0000000000000000 04:59:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:23 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:23 executing program 3: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf250200000008003900fffdffff08002b000500000008003a0007000000050037000100000005002d00010000000e0009000180c200000e000005002900010000000500380000000000080034008601000008002b0000100000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000100)) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0xfffffffffffffcf6, 0x3f6, 0x800, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24048004}, 0x10) bind$bt_hci(r0, &(0x7f0000000000), 0x6) [ 935.931570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.938834] R13: 00007fff4090dc3f R14: 00007fe0f7997300 R15: 0000000000022000 04:59:23 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x200000, 0x0) 04:59:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (fail_nth: 1) 04:59:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000180)}) (fail_nth: 1) [ 936.116380] FAULT_INJECTION: forcing a failure. [ 936.116380] name failslab, interval 1, probability 0, space 0, times 0 [ 936.132531] CPU: 1 PID: 24675 Comm: syz-executor.4 Not tainted 4.14.273-syzkaller #0 [ 936.140419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.149765] Call Trace: [ 936.152355] dump_stack+0x1b2/0x281 [ 936.155986] should_fail.cold+0x10a/0x149 [ 936.160137] should_failslab+0xd6/0x130 [ 936.164112] kmem_cache_alloc_trace+0x29a/0x3d0 [ 936.168787] con_font_op+0x104/0xdb0 [ 936.172496] ? __might_fault+0x104/0x1b0 [ 936.176560] ? con_write+0xa0/0xa0 [ 936.180100] ? lock_downgrade+0x740/0x740 [ 936.184246] ? __might_fault+0x177/0x1b0 [ 936.188309] vt_ioctl+0x13e0/0x1d50 [ 936.191936] ? vt_waitactive+0x2f0/0x2f0 [ 936.196008] ? tty_jobctrl_ioctl+0x3b/0xd00 [ 936.200326] ? vt_waitactive+0x2f0/0x2f0 [ 936.204385] tty_ioctl+0x50f/0x1430 [ 936.208015] ? tty_fasync+0x2c0/0x2c0 [ 936.211819] ? proc_fail_nth_write+0x7b/0x180 [ 936.216314] ? trace_hardirqs_on+0x10/0x10 [ 936.220559] ? fsnotify+0x974/0x11b0 [ 936.224270] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 936.229197] ? debug_check_no_obj_freed+0x2c0/0x680 [ 936.234212] ? SyS_write+0x1b7/0x210 [ 936.237924] ? tty_fasync+0x2c0/0x2c0 [ 936.241720] do_vfs_ioctl+0x75a/0xff0 [ 936.245526] ? lock_acquire+0x170/0x3f0 [ 936.249497] ? ioctl_preallocate+0x1a0/0x1a0 [ 936.253903] ? __fget+0x265/0x3e0 [ 936.257354] ? do_vfs_ioctl+0xff0/0xff0 [ 936.261324] ? security_file_ioctl+0x83/0xb0 [ 936.265734] SyS_ioctl+0x7f/0xb0 [ 936.269099] ? do_vfs_ioctl+0xff0/0xff0 [ 936.273071] do_syscall_64+0x1d5/0x640 [ 936.276960] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 936.282146] RIP: 0033:0x7f5f61cc8049 [ 936.285849] RSP: 002b:00007f5f6063d168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.293551] RAX: ffffffffffffffda RBX: 00007f5f61ddaf60 RCX: 00007f5f61cc8049 [ 936.300815] RDX: 0000000020000580 RSI: 0000000000004b6b RDI: 0000000000000003 [ 936.308077] RBP: 00007f5f6063d1d0 R08: 0000000000000000 R09: 0000000000000000 04:59:23 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) (fail_nth: 2) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x10, 0x0}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x7fff, 0x8, 0x9}) 04:59:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r1, 0x4b36) 04:59:23 executing program 3: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf250200000008003900fffdffff08002b000500000008003a0007000000050037000100000005002d00010000000e0009000180c200000e000005002900010000000500380000000000080034008601000008002b0000100000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000100)) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) (async) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0xfffffffffffffcf6, 0x3f6, 0x800, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24048004}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) 04:59:23 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) [ 936.315340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.322605] R13: 00007ffc2464b68f R14: 00007f5f6063d300 R15: 0000000000022000 04:59:23 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000180)}) (fail_nth: 2) 04:59:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r1, 0x4b36) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) 04:59:23 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x40, 0x96, &(0x7f0000000180)}) 04:59:23 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x10, 0x0}) (async) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x7fff, 0x8, 0x9}) [ 936.483070] FAULT_INJECTION: forcing a failure. [ 936.483070] name failslab, interval 1, probability 0, space 0, times 0 04:59:23 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) 04:59:23 executing program 3: ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf250200000008003900fffdffff08002b000500000008003a0007000000050037000100000005002d00010000000e0009000180c200000e000005002900010000000500380000000000080034008601000008002b0000100000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000100)) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0xfffffffffffffcf6, 0x3f6, 0x800, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24048004}, 0x10) bind$bt_hci(r0, &(0x7f0000000000), 0x6) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r0, 0x0, 0x0) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) (async) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000ffdbdf250200000008003900fffdffff08002b000500000008003a0007000000050037000100000005002d00010000000e0009000180c200000e000005002900010000000500380000000000080034008601000008002b0000100000"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000100)) (async) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, &(0x7f0000000040)=0x3, 0x4) (async) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0xfffffffffffffcf6, 0x3f6, 0x800, 0x70bd2c, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24048004}, 0x10) (async) bind$bt_hci(r0, &(0x7f0000000000), 0x6) (async) 04:59:23 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KDENABIO(r1, 0x4b36) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$KDENABIO(r1, 0x4b36) (async) [ 936.634730] CPU: 0 PID: 24691 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 936.642638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 936.651998] Call Trace: [ 936.654585] dump_stack+0x1b2/0x281 [ 936.658218] should_fail.cold+0x10a/0x149 [ 936.662368] should_failslab+0xd6/0x130 [ 936.666342] kmem_cache_alloc_trace+0x29a/0x3d0 [ 936.671018] gsmld_open+0xe5/0x7b0 [ 936.674554] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 936.678789] tty_ldisc_open+0x6c/0xb0 [ 936.682587] tty_set_ldisc+0x287/0x5d0 [ 936.686470] tty_ioctl+0xa2a/0x1430 [ 936.690094] ? tty_fasync+0x2c0/0x2c0 [ 936.693891] ? proc_fail_nth_write+0x7b/0x180 [ 936.698385] ? trace_hardirqs_on+0x10/0x10 [ 936.702624] ? fsnotify+0x974/0x11b0 [ 936.706333] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 936.711258] ? debug_check_no_obj_freed+0x2c0/0x680 [ 936.716272] ? SyS_write+0x1b7/0x210 [ 936.719984] ? tty_fasync+0x2c0/0x2c0 [ 936.723784] do_vfs_ioctl+0x75a/0xff0 [ 936.727585] ? lock_acquire+0x170/0x3f0 [ 936.731558] ? ioctl_preallocate+0x1a0/0x1a0 [ 936.735983] ? __fget+0x265/0x3e0 [ 936.735995] ? do_vfs_ioctl+0xff0/0xff0 [ 936.743404] ? security_file_ioctl+0x83/0xb0 [ 936.743416] SyS_ioctl+0x7f/0xb0 [ 936.743424] ? do_vfs_ioctl+0xff0/0xff0 [ 936.743436] do_syscall_64+0x1d5/0x640 [ 936.743452] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 936.743461] RIP: 0033:0x7fe0f9043049 [ 936.743466] RSP: 002b:00007fe0f79b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 936.743476] RAX: ffffffffffffffda RBX: 00007fe0f9155f60 RCX: 00007fe0f9043049 [ 936.743482] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 936.743487] RBP: 00007fe0f79b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 936.743492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.743498] R13: 00007fff4090dc3f R14: 00007fe0f79b8300 R15: 0000000000022000 04:59:24 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) (fail_nth: 3) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000000)={0x0, 0x10, 0x0}) ioctl$TIOCSRS485(r0, 0x542f, &(0x7f0000000040)={0x7fff, 0x8, 0x9}) 04:59:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7, "ef11c0", "8bfbd59ac08ce91c41c8c72d0291585662825e45f0dad4b1085d8200557e74ca93fa18cd739e1827b9584d7400ec1ce32c635b45530e65a7ed8b934dc4266c14f9e7375d90142a4fe8839327973cabf7f0c4c2f0ab688341bee8bf4b7b8c2e95a1916a0ca71e17cb4fc11bcf7626fe8e1fac9ed427c966dfe76078038dd2d8ca9e99555bcc41d0491c7c8b71d8177a61366e2e46bd522243f5aaa9fbc4f616e186653bc72c08079db6a5efc15e4b01a81beaa36d3ff90e4837fe12f13ff1d5960bf6d4e64f075dd2794489556927d3ad584ba6367ff7c1a7c733479cee5a81ecdaa867cf8f3bf2ea8d864ea6dd917ea43c3aff710f5815d40dac28cbefbf98b2"}}, 0x110) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) 04:59:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 04:59:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x40, 0x96, &(0x7f0000000180)}) 04:59:24 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) 04:59:24 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 04:59:24 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x3) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) 04:59:24 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x40, 0x96, &(0x7f0000000180)}) 04:59:24 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x3c50) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x4, 0x0, 0x1f}) 04:59:24 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7, "ef11c0", "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"}}, 0x110) (async) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) 04:59:24 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) [ 937.451690] FAULT_INJECTION: forcing a failure. [ 937.451690] name failslab, interval 1, probability 0, space 0, times 0 [ 937.518573] CPU: 0 PID: 24784 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 937.526477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 937.535827] Call Trace: [ 937.538418] dump_stack+0x1b2/0x281 [ 937.542054] should_fail.cold+0x10a/0x149 [ 937.546208] should_failslab+0xd6/0x130 [ 937.550182] kmem_cache_alloc_trace+0x29a/0x3d0 [ 937.554854] gsmld_open+0x151/0x7b0 [ 937.558482] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 937.562717] tty_ldisc_open+0x6c/0xb0 [ 937.566528] tty_set_ldisc+0x287/0x5d0 [ 937.566540] tty_ioctl+0xa2a/0x1430 [ 937.566551] ? tty_fasync+0x2c0/0x2c0 [ 937.566568] ? proc_fail_nth_write+0x7b/0x180 [ 937.566580] ? trace_hardirqs_on+0x10/0x10 [ 937.566594] ? fsnotify+0x974/0x11b0 [ 937.566603] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 937.566612] ? debug_check_no_obj_freed+0x2c0/0x680 [ 937.566623] ? SyS_write+0x1b7/0x210 [ 937.566634] ? tty_fasync+0x2c0/0x2c0 [ 937.566645] do_vfs_ioctl+0x75a/0xff0 [ 937.566655] ? lock_acquire+0x170/0x3f0 [ 937.566665] ? ioctl_preallocate+0x1a0/0x1a0 [ 937.566677] ? __fget+0x265/0x3e0 [ 937.566688] ? do_vfs_ioctl+0xff0/0xff0 [ 937.566699] ? security_file_ioctl+0x83/0xb0 [ 937.566709] SyS_ioctl+0x7f/0xb0 [ 937.566717] ? do_vfs_ioctl+0xff0/0xff0 [ 937.566728] do_syscall_64+0x1d5/0x640 [ 937.566744] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 937.566752] RIP: 0033:0x7fe0f9043049 [ 937.566757] RSP: 002b:00007fe0f79b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.566767] RAX: ffffffffffffffda RBX: 00007fe0f9155f60 RCX: 00007fe0f9043049 [ 937.566772] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000003 04:59:25 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) (fail_nth: 4) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x116, 0x12, &(0x7f0000000180)}) 04:59:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) (async) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) 04:59:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x3c50) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x4, 0x0, 0x1f}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x3c50) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) (async) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x4, 0x0, 0x1f}) (async) 04:59:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$RDMA_USER_CM_CMD_REJECT(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x7, "ef11c0", "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"}}, 0x110) (async) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) 04:59:25 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) [ 937.566777] RBP: 00007fe0f79b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 937.566782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.566787] R13: 00007fff4090dc3f R14: 00007fe0f79b8300 R15: 0000000000022000 04:59:25 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x116, 0x12, &(0x7f0000000180)}) 04:59:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x3c00bea81af58a0c}, 0x0) 04:59:25 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000040)=0x3c50) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) (async, rerun: 32) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x4, 0x0, 0x1f}) (rerun: 32) 04:59:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x3c00bea81af58a0c}, 0x0) [ 938.251104] FAULT_INJECTION: forcing a failure. [ 938.251104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 938.262916] CPU: 1 PID: 24840 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 938.262924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 938.280151] Call Trace: [ 938.280166] dump_stack+0x1b2/0x281 04:59:25 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x3bf60d06}) [ 938.280183] should_fail.cold+0x10a/0x149 [ 938.280192] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 938.280206] __alloc_pages_nodemask+0x22c/0x2720 [ 938.280216] ? depot_save_stack+0x10d/0x3f0 04:59:25 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x3c00bea81af58a0c}, 0x0) [ 938.280232] ? __lock_acquire+0x5fc/0x3f20 [ 938.280245] ? tty_ioctl+0xa2a/0x1430 [ 938.280253] ? do_vfs_ioctl+0x75a/0xff0 [ 938.280260] ? SyS_ioctl+0x7f/0xb0 [ 938.280268] ? do_syscall_64+0x1d5/0x640 [ 938.280277] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 938.280287] ? __lock_acquire+0x5fc/0x3f20 [ 938.280303] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 938.280314] ? debug_check_no_obj_freed+0x2c0/0x680 [ 938.280326] ? trace_hardirqs_on+0x10/0x10 [ 938.280339] cache_grow_begin+0x91/0x700 [ 938.280346] ? fs_reclaim_release+0xd0/0x110 [ 938.280355] ? check_preemption_disabled+0x35/0x240 [ 938.280366] cache_alloc_refill+0x273/0x350 [ 938.280380] kmem_cache_alloc_trace+0x340/0x3d0 [ 938.280393] gsmld_open+0x151/0x7b0 [ 938.280402] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 938.280412] tty_ldisc_open+0x6c/0xb0 [ 938.280422] tty_set_ldisc+0x287/0x5d0 [ 938.280433] tty_ioctl+0xa2a/0x1430 [ 938.280442] ? tty_fasync+0x2c0/0x2c0 [ 938.280452] ? proc_fail_nth_write+0x7b/0x180 [ 938.280461] ? trace_hardirqs_on+0x10/0x10 [ 938.280475] ? fsnotify+0x974/0x11b0 [ 938.280483] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 938.280491] ? debug_check_no_obj_freed+0x2c0/0x680 [ 938.280501] ? SyS_write+0x1b7/0x210 [ 938.280513] ? tty_fasync+0x2c0/0x2c0 [ 938.280523] do_vfs_ioctl+0x75a/0xff0 [ 938.280532] ? lock_acquire+0x170/0x3f0 [ 938.280541] ? ioctl_preallocate+0x1a0/0x1a0 [ 938.280553] ? __fget+0x265/0x3e0 [ 938.280564] ? do_vfs_ioctl+0xff0/0xff0 [ 938.280575] ? security_file_ioctl+0x83/0xb0 [ 938.280584] SyS_ioctl+0x7f/0xb0 [ 938.280591] ? do_vfs_ioctl+0xff0/0xff0 [ 938.280600] do_syscall_64+0x1d5/0x640 [ 938.280615] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 938.280623] RIP: 0033:0x7fe0f9043049 [ 938.280628] RSP: 002b:00007fe0f79b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 938.280638] RAX: ffffffffffffffda RBX: 00007fe0f9155f60 RCX: 00007fe0f9043049 [ 938.280644] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000003 04:59:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) (fail_nth: 5) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x8000, "000200", 0x9, 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x3cb100, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x290540) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x1f, 0x8, 0x100}) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x54421016, 0x4) 04:59:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) (async) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x3bf60d06}) 04:59:26 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000080)) 04:59:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x23a100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) [ 938.280649] RBP: 00007fe0f79b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 938.280653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.280659] R13: 00007fff4090dc3f R14: 00007fe0f79b8300 R15: 0000000000022000 04:59:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x116, 0x12, &(0x7f0000000180)}) 04:59:26 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000080)) 04:59:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x23a100, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) 04:59:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000080)) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x9, 0x3bf60d06}) 04:59:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x8000, "000200", 0x9, 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x3cb100, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x290540) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x1f, 0x8, 0x100}) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x54421016, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x8000, "000200", 0x9, 0x9}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x3cb100, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x290540) (async) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x1f, 0x8, 0x100}) (async) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x54421016, 0x4) (async) 04:59:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCEXCL(r1, 0x540c) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000180)}) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x10, 0x20, &(0x7f00000005c0)="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"}) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000c00), 0x4) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x101) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x9c, 0x0, &(0x7f00000009c0)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x1, 0x10}, @flat=@weak_binder={0x77622a85, 0x109, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x2}, @release={0x40046306, 0x3}, @clear_death, @acquire_done={0x40106309, 0x2}], 0xf7, 0x0, &(0x7f0000000a80)="b359f0f7478270ed8c2a42e98ba75c0dd10f58f21d267b81f848abb30a41da26bf92be17e234deecd4a1faa98ea9b28f032ce4d78cca67edc6999ceaa4b3bfd8b68b493569a797836f17c26c42f885d55534f047d797924c645dfcf7e4c690c7eb91fe56551a246cd0715ba59afead14093094417a1499906ae7f2bfc458c458f16a0378c665c692ca9f0fc0dea35ce5cb0b84fd5db900b8d6b3f77995bafc2806d3b54b19a1cc9e1148a5f9aaa2f3c553a1a090073a04d14e2eb01fbee4d6c46388743b4cbabb3d8fcf29530445e6e179462e7a880de063d931d3f4f3c6f6108e462b7433941a2844f8cc4ce14cbc804c7323eeb40970"}) 04:59:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async, rerun: 32) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x23a100, 0x0) (rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x24}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xc7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4008000) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) [ 939.327286] FAULT_INJECTION: forcing a failure. [ 939.327286] name failslab, interval 1, probability 0, space 0, times 0 [ 939.386302] CPU: 0 PID: 25026 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 939.394206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.403557] Call Trace: [ 939.406151] dump_stack+0x1b2/0x281 [ 939.409784] should_fail.cold+0x10a/0x149 [ 939.413940] should_failslab+0xd6/0x130 [ 939.417918] __kmalloc+0x2c1/0x400 [ 939.421459] ? __kfifo_alloc+0xdc/0x240 [ 939.425433] __kfifo_alloc+0xdc/0x240 [ 939.429234] gsm_dlci_alloc+0xd4/0x460 [ 939.433127] gsm_activate_mux+0x22e/0x2e0 [ 939.437276] gsmld_open+0x4ed/0x7b0 [ 939.440900] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 939.445132] tty_ldisc_open+0x6c/0xb0 [ 939.448929] tty_set_ldisc+0x287/0x5d0 [ 939.452815] tty_ioctl+0xa2a/0x1430 [ 939.456440] ? tty_fasync+0x2c0/0x2c0 [ 939.460242] ? proc_fail_nth_write+0x7b/0x180 [ 939.464740] ? trace_hardirqs_on+0x10/0x10 [ 939.468977] ? fsnotify+0x974/0x11b0 [ 939.472692] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 939.477619] ? debug_check_no_obj_freed+0x2c0/0x680 [ 939.482633] ? SyS_write+0x1b7/0x210 [ 939.486347] ? tty_fasync+0x2c0/0x2c0 [ 939.490154] do_vfs_ioctl+0x75a/0xff0 [ 939.493956] ? lock_acquire+0x170/0x3f0 [ 939.497929] ? ioctl_preallocate+0x1a0/0x1a0 [ 939.502337] ? __fget+0x265/0x3e0 [ 939.505793] ? do_vfs_ioctl+0xff0/0xff0 [ 939.509779] ? security_file_ioctl+0x83/0xb0 [ 939.509791] SyS_ioctl+0x7f/0xb0 [ 939.509799] ? do_vfs_ioctl+0xff0/0xff0 [ 939.509811] do_syscall_64+0x1d5/0x640 [ 939.509827] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 939.509836] RIP: 0033:0x7fe0f9043049 [ 939.509841] RSP: 002b:00007fe0f79b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 939.509850] RAX: ffffffffffffffda RBX: 00007fe0f9155f60 RCX: 00007fe0f9043049 [ 939.509855] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 939.509860] RBP: 00007fe0f79b81d0 R08: 0000000000000000 R09: 0000000000000000 04:59:26 executing program 0: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200), 0x2, {0xa, 0x4e22, 0x8000, @empty, 0x3}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x146080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x111, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(0xffffffffffffffff, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) (fail_nth: 6) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x2480, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) 04:59:26 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, &(0x7f0000000080)) 04:59:26 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x902c0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x75b0d75d, 0x48000000000, 0x400, 0x7}) 04:59:26 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x8000, "000200", 0x9, 0x9}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x3cb100, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x290540) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x1f, 0x8, 0x100}) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x54421016, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000140)={0xffffffffffffffff, 0x8000, "000200", 0x9, 0x9}) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x3cb100, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x290540) (async) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f00000000c0)={0x1f, 0x8, 0x100}) (async) bind$bt_hci(r0, &(0x7f0000000040), 0xeb84) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) (async) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x54421016, 0x4) (async) 04:59:26 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) (rerun: 32) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000180)}) (async, rerun: 64) syz_open_dev$tty20(0xc, 0x4, 0x1) (async, rerun: 64) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x10, 0x20, &(0x7f00000005c0)="0e9b707302c5d2e9b3dc90b70f908cce1dfb4a0f5f9cb4ca7d1a9f460c19f9bf31d461be6eb27274e6f040668d8297f8c1a9b86017b787cb38dc2f8417c72d744431c05345761307c09f80bebd9cba3460ea9fa76e6d2834aafb9197a394499dc48f558bb353ebee572822cf4855b336d323fb900702b388a2aa35d486095afce5e711df5dc7c26f200175682e0506db3c9d981f97be18187490198e62ae91006c87d9ae688bac99da696839b92b2895a71ac95756924518e2d30beeb86d5188c6d3883224b7ca0cfe386b232cdc1283e557ac8e03cc6520ded025c0d348ce0046a1838a4bbbbe5ee05f6664aa84e6a677de465335ce81834cb06bb9e7f1bb1031e825ea710e8cf7950033c4042fbe306919e58c2453f88ee0e986076f567a94095548e9d86693fa1329017adb329363018e5fe2fc016fd0ade6913d2631f13b77586683b13fc2f1e2dcfaf1684f1dc0f45255e149d44723c875fa0b56583f54038b9e0af483241588e240fcc29d902d41df8595f0649b83181b172637757202509fea0d6e44a032cab2f05ba44ecff0d40074d515efb319e6a3e228f33bb90c61a9efff71b81fcc734989235db4979c20481c5d3ddab39f2cd84d3719af070d52a772d2406185f617fbd27cc38518938f5f828ae0fe0c1f4f983bae4d1980e1cc78fc0dab33d38ba514da1284637d1f66da885d903f01e8a9895c371d9ac9b0384b108dc59490617d1cd346275b4ab9854e0d27daf35abdc305017d87c6e057fb230e4aaae18ad06ac481b92a0b38602391458423db2835bdef48792cfd4356893a47e65dabc5ae8e026d50682cabadac9a3f7c1c3f2f04b0f29d57f611162b5c65c658a71bbefa00592d0a9be3265d4f4e9afea7a94da23027294d15bc5dc102a39ef44762d982745982a4a9ce6e34ac090002c5f510d80efa370822d2c213229554ba4b28f674b86761a0c5ae6f1af600505e6c9aedcac804e02db8a7525c2b75d4d0b028c80bc84ea8958dcce6db304d387ad5f3ea28a14ccf58861e81fe7aa13fdf52a26d2c20c4006ab354f5bc7e659794cbc34c471cbea33dc11564e9a63f89f0e83cdadc5212c31663463071cb01a267200bac72350058f52e282e599a49c5aea8b212160f0169a18f845401f80c7f01a61b913fe23909952354f2fd12a3ba34d08d7cb5de2e125ffabb5541233ddd95d284b18ba837c504e3b6a186b442804541f1eaab9faa9ee487609c6015772fb2983773653aa360cb31a2047fa91f5f5062859af6b63386680696a9d69b0ae58c128cb14188e7f3b509ec9f584092b66677769e8f934cbfeab372b8f8050273a5950a45e191af75ad0800a3cb48d4933cb10bc4344bace126df75df0bffcf377b1b5ba6be7525b5db92a874a7550e56ffef7654cf06bb54cf03edf4a56c605600"}) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000c00), 0x4) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x101) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x9c, 0x0, &(0x7f00000009c0)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x1, 0x10}, @flat=@weak_binder={0x77622a85, 0x109, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x2}, @release={0x40046306, 0x3}, @clear_death, @acquire_done={0x40106309, 0x2}], 0xf7, 0x0, &(0x7f0000000a80)="b359f0f7478270ed8c2a42e98ba75c0dd10f58f21d267b81f848abb30a41da26bf92be17e234deecd4a1faa98ea9b28f032ce4d78cca67edc6999ceaa4b3bfd8b68b493569a797836f17c26c42f885d55534f047d797924c645dfcf7e4c690c7eb91fe56551a246cd0715ba59afead14093094417a1499906ae7f2bfc458c458f16a0378c665c692ca9f0fc0dea35ce5cb0b84fd5db900b8d6b3f77995bafc2806d3b54b19a1cc9e1148a5f9aaa2f3c553a1a090073a04d14e2eb01fbee4d6c46388743b4cbabb3d8fcf29530445e6e179462e7a880de063d931d3f4f3c6f6108e462b7433941a2844f8cc4ce14cbc804c7323eeb40970"}) [ 939.509865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 939.509870] R13: 00007fff4090dc3f R14: 00007fe0f79b8300 R15: 0000000000022000 04:59:26 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) 04:59:27 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x902c0, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) ioctl$TIOCSRS485(r0, 0x542f, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x75b0d75d, 0x48000000000, 0x400, 0x7}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x902c0, 0x0) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f0000000080)) (async) ioctl$TIOCSRS485(r0, 0x542f, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000000)={0x5, 0x75b0d75d, 0x48000000000, 0x400, 0x7}) (async) 04:59:27 executing program 5: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCGISO7816(r0, 0x80285442, &(0x7f0000000080)) 04:59:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) 04:59:27 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, 0x0}) (async) 04:59:27 executing program 4: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000000)) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f0000000580)={0x0, 0x10, &(0x7f0000000180)}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000d00), 0x301002, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r2, 0x0, 0x0) (async) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)={0x10, 0x20, &(0x7f00000005c0)="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"}) r3 = socket$caif_seqpacket(0x25, 0x5, 0x0) setsockopt$CAIFSO_LINK_SELECT(r3, 0x116, 0x7f, &(0x7f0000000c00), 0x4) (async, rerun: 32) r4 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x101) (rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x9c, 0x0, &(0x7f00000009c0)=[@enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x5, 0x1, 0x10}, @flat=@weak_binder={0x77622a85, 0x109, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}, @free_buffer={0x40086303, r4}, @increfs_done={0x40106308, 0x2}, @release={0x40046306, 0x3}, @clear_death, @acquire_done={0x40106309, 0x2}], 0xf7, 0x0, &(0x7f0000000a80)="b359f0f7478270ed8c2a42e98ba75c0dd10f58f21d267b81f848abb30a41da26bf92be17e234deecd4a1faa98ea9b28f032ce4d78cca67edc6999ceaa4b3bfd8b68b493569a797836f17c26c42f885d55534f047d797924c645dfcf7e4c690c7eb91fe56551a246cd0715ba59afead14093094417a1499906ae7f2bfc458c458f16a0378c665c692ca9f0fc0dea35ce5cb0b84fd5db900b8d6b3f77995bafc2806d3b54b19a1cc9e1148a5f9aaa2f3c553a1a090073a04d14e2eb01fbee4d6c46388743b4cbabb3d8fcf29530445e6e179462e7a880de063d931d3f4f3c6f6108e462b7433941a2844f8cc4ce14cbc804c7323eeb40970"}) [ 939.853470] FAULT_INJECTION: forcing a failure. [ 939.853470] name failslab, interval 1, probability 0, space 0, times 0 [ 939.955049] CPU: 1 PID: 25070 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 939.962956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 939.972320] Call Trace: [ 939.972340] dump_stack+0x1b2/0x281 [ 939.972368] should_fail.cold+0x10a/0x149 [ 939.972383] should_failslab+0xd6/0x130 [ 939.972395] kmem_cache_alloc_trace+0x29a/0x3d0 [ 939.972408] tty_register_device_attr+0x1d2/0x710 [ 939.972417] ? redirected_tty_write+0xb0/0xb0 [ 939.972428] ? __raw_spin_lock_init+0x28/0x100 04:59:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x2, 0x2}, 0x6) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x40) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000000)) [ 939.972438] ? tty_port_init+0xa2/0x190 [ 939.972446] ? gsm_dlci_alloc+0x390/0x460 [ 939.972458] gsmld_open+0x548/0x7b0 [ 939.972466] ? gsm_cleanup_mux+0x3c0/0x3c0 [ 939.972476] tty_ldisc_open+0x6c/0xb0 [ 939.972487] tty_set_ldisc+0x287/0x5d0 [ 939.972499] tty_ioctl+0xa2a/0x1430 [ 939.972510] ? tty_fasync+0x2c0/0x2c0 [ 939.972522] ? proc_fail_nth_write+0x7b/0x180 [ 939.972530] ? trace_hardirqs_on+0x10/0x10 [ 939.972543] ? fsnotify+0x974/0x11b0 [ 940.048634] ? proc_tgid_io_accounting+0x7a0/0x7a0 [ 940.048647] ? debug_check_no_obj_freed+0x2c0/0x680 [ 940.058564] ? SyS_write+0x1b7/0x210 [ 940.062280] ? tty_fasync+0x2c0/0x2c0 [ 940.066089] do_vfs_ioctl+0x75a/0xff0 [ 940.066103] ? lock_acquire+0x170/0x3f0 [ 940.066113] ? ioctl_preallocate+0x1a0/0x1a0 [ 940.066126] ? __fget+0x265/0x3e0 [ 940.066138] ? do_vfs_ioctl+0xff0/0xff0 [ 940.066149] ? security_file_ioctl+0x83/0xb0 [ 940.066160] SyS_ioctl+0x7f/0xb0 [ 940.066168] ? do_vfs_ioctl+0xff0/0xff0 [ 940.066180] do_syscall_64+0x1d5/0x640 [ 940.066196] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 940.066204] RIP: 0033:0x7fe0f9043049 [ 940.066209] RSP: 002b:00007fe0f79b8168 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 940.066220] RAX: ffffffffffffffda RBX: 00007fe0f9155f60 RCX: 00007fe0f9043049 [ 940.066225] RDX: 00000000200002c0 RSI: 0000000000005423 RDI: 0000000000000003 [ 940.066231] RBP: 00007fe0f79b81d0 R08: 0000000000000000 R09: 0000000000000000 [ 940.066236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.066242] R13: 00007fff4090dc3f R14: 00007fe0f79b8300 R15: 0000000000022000 [ 940.357948] kasan: CONFIG_KASAN_INLINE enabled [ 940.367396] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 940.378449] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 940.384685] Modules linked in: [ 940.387870] CPU: 0 PID: 25062 Comm: syz-executor.0 Not tainted 4.14.273-syzkaller #0 [ 940.395746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 940.405091] task: ffff88809c410000 task.stack: ffff88807d020000 [ 940.411146] RIP: 0010:cdev_del+0x22/0x90 [ 940.415195] RSP: 0018:ffff88807d027ca0 EFLAGS: 00010207 [ 940.420546] RAX: dffffc0000000000 RBX: ffff8880b0a70500 RCX: 0000000000000000 [ 940.427807] RDX: 000000000000000c RSI: ffff88809c410888 RDI: 0000000000000064 [ 940.435066] RBP: 0000000000000000 R08: ffffffff8b9ba238 R09: 0000000000000000 [ 940.442326] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880b0a70508 [ 940.449585] R13: ffff8880af7f5448 R14: ffff8880a5321b80 R15: ffff8880b6126f18 [ 940.456847] FS: 0000555556dd6400(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000 [ 940.465059] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 940.470928] CR2: 0000001b2f224000 CR3: 00000000a9486000 CR4: 00000000003406f0 [ 940.478197] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 940.485455] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 940.492713] Call Trace: [ 940.495293] tty_unregister_device+0x101/0x1a0 [ 940.499870] gsmld_close+0xaa/0x1f0 [ 940.503488] ? gsmtty_cleanup+0x150/0x150 [ 940.507628] tty_ldisc_close+0x8c/0xc0 [ 940.511507] tty_ldisc_release+0xe8/0x400 [ 940.515651] tty_release_struct+0x20/0xe0 [ 940.519795] tty_release+0xb3f/0x10d0 [ 940.523590] ? do_tty_hangup+0x30/0x30 [ 940.527469] __fput+0x25f/0x7a0 [ 940.530746] task_work_run+0x11f/0x190 [ 940.534626] exit_to_usermode_loop+0x1ad/0x200 [ 940.539200] do_syscall_64+0x4a3/0x640 [ 940.543078] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 940.548255] RIP: 0033:0x7fe0f8ff5c8b [ 940.551951] RSP: 002b:00007fff4090dca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 940.559645] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fe0f8ff5c8b [ 940.566902] RDX: 0000000000000000 RSI: 0000001b2f223c6c RDI: 0000000000000003 [ 940.574159] RBP: 00007fe0f9157960 R08: 0000000000000000 R09: 000000000fa463bd [ 940.581415] R10: 0000000000000000 R11: 0000000000000293 R12: 00000000000e5acb [ 940.588675] R13: 00007fff4090dda0 R14: 00007fe0f9156030 R15: 0000000000000032 [ 940.595936] Code: e5 44 f7 ff eb d2 0f 1f 00 55 48 89 fd 48 83 ec 08 e8 e3 93 cd ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f [ 940.615089] RIP: cdev_del+0x22/0x90 RSP: ffff88807d027ca0 [ 940.643941] ---[ end trace 4c892efc35c5b863 ]--- [ 940.648798] Kernel panic - not syncing: Fatal exception [ 940.654309] Kernel Offset: disabled [ 940.657917] Rebooting in 86400 seconds..